Azure Identity Protection

Azure identity protection is the core feature which helps to detect suspicious and risky logins and provide the stringent & automated remediation based on the Microsoft threat intelligence framework.

Azure AD also have capability to detect all the parameters in the above image used to detect and quarantine threats and further can send the actions to the Microsoft sentinel to proceed further for further analysis and send data to authorized third parties (SIEM & Alert systems) to ensure the alert is mitigated in the very early life-cycle stage.