Practice Defender for Identity alert investigation in an isolated, planned lab.

Ensure all available audit records are collected to Unified Audit Log

A tool to assess and automate configuration in the Defender portal

Improve Defender performance by performing one full scan

Check cloud Kerberos trust prerequisites before using Hello for on-premises SSO.

Check how authentication and policy requirements combine before treating a blocked sign-in as resolved.

A tool to assess historical impact of report-only policies

Automate analysis of MDE Client Analyzer output for common issues

Comprehensive automation for device cleanup

The defaults are better than they used to be, but you can still do better.