Welcome back! Microsoft Defender for Identity was originally called Azure Advanced Threat Protection, or Azure ATP. It's a cloud-based security solution that leverages on-prem Active Directory to identify, detect, and investigate things like threats and compromised identities. It also helps identify malicious insider attacks. Microsoft Defender for Identity uses learning-based analytics to help you monitor user behavior and activities, and it allows you to protect Active Directory user identities and credentials. You can also use Microsoft Defender for Identity to identify and investigate suspicious user activities and attacks throughout the kill chain, and to provide incident information that assists in triage. Over the next couple demonstrations, I'll show you how to create a Defender for Identity instance and how to connect Defender for Identity to Active Directory.