Managing and monitoring MDI
You can now start managing and monitoring the MDI service. From a management perspective, this means configuring settings and features such as Entity tags and Excluded entities. From a monitoring perspective, it is important to review MDI regularly by looking at Health Issues from the General section of the MDI settings page.
Some of these capabilities are presented in greater detail next
Entity tags
MDI allows you to apply Entity tags to sensitive accounts. The status of the tags that you define enables MDI to detect things such as sensitive group modification and lateral movement. Additionally, honeytoken accounts may be configured to trap malicious actors and trigger an alert.
You can configure the three following types of entity tags in MDI:
- Sensitive tags
- Honeytoken tags
- Exchange server tags
The following sections explain these tags in detail.
