Managing risk with Identity Protection
To further support security for users, Microsoft employs an AI-based system for monitoring risky sign-ins. Known as Identity Protection, it continually monitors your users for known and new vulnerabilities and patterns that might indicate a compromised account.
Identity Protection monitors for two specific types of risk – User risk and Sign-in risk.
User risk
User risk is the probability that a user's account has been compromised. A risk score is calculated based on Microsoft's internal and external threat intelligence systems, such as security researchers, Microsoft's security teams, and other trusted services.
These types of risks are calculated offline – that is, they are based on information obtained from the above sources.
An example of the kind of threat it looks for are leaked credentials – when cybercriminals compromise a user's details, they are often shared on the dark web and traded...