MT.1059 - Microsoft Defender for Identity health issues should be resolved

Contributed by Thomas Naunheim with 2 co-contributorsAll contributors →

Overview

Microsoft Defender for Identity health issues should be resolved.

Maester reads the Defender for Identity health issues of the tenant and creates one result per issue (MT.1059.<hash of the issue name>). The severity of each result is the severity Defender for Identity reports for the issue. Issues whose alerts have all been suppressed or dismissed are skipped.

Remediation action

Follow the recommendations of each open health issue in the Microsoft Defender portal.

Related links

• Microsoft Defender for Identity health issues
• Health issues - Microsoft Defender

Test Metadata

Field	Value
Test ID	MT.1059
Severity	Medium
Suite	Maester
Product	Defender
Related products	Active Directory
Feature	Defender for Identity
Area	Logging and detection
Resource type	Tenant
User impact	Low
Implementation cost	Medium
MITRE ATT&CK	None
PowerShell test	Test-MtMdiHealthIssue
Services	Graph
Runs per instance	Yes, one result per instance from Get-MtMdiHealthIssueInstance

Source

• Test: tests/maester/defender/Test.MT.1059.ps1
• Documentation: tests/maester/defender/Test.MT.1059.md