The hunting graph in advanced hunting now includes new identity-focused predefined scenarios.

The hunting graph in advanced hunting now includes new identity-focused predefined scenarios. These scenarios help you discover attack paths, privilege escalation routes, and credential access risks across on-premises and cloud environments, including Kerberoast and AS-REP roast paths, domain compromise routes, OAuth application risks, and guest user access to cloud resources.

Affected: Microsoft Defender XDR, Advanced Hunting

Related changes

• The hunting graph in advanced hunting is now generally available. · Graph
• You can now hunt by using the hunting graph, · Graph
• The Identity Security dashboard now includes a new Human identities card · Identity
• Identity security enhancements · Identity
• Local AI agent discovery on Windows endpoints · Advanced Hunting
• The following advanced hunting schema tables are now generally available · Advanced Hunting

View at Microsoft → Copy summary