Product
Defender for Identity
Cloud-based security solution that identifies, detects, and investigates advanced threats, compromised identities, and malicious insider actions
JSON
pass_the_ticket
LowMicrosoft Defender for Identity alert for pass-the-ticket attacks indicating lateral movement through stolen Kerberos tickets