WebChecks

Defender for Identity

Monitors on-premises Active Directory signals (via a lightweight sensor on domain controllers) to detect compromised identities and lateral-movement/privilege-escalation attacks.

Security

Also searchable as: MDI, Azure ATP, Advanced Threat Analytics

https://webchecks.io/365-license-lookup/feature/defender-for-identity

Licenses that include this

Enterprise

LicenseString ID
Enterprise Mobility + Security E5EMSPREMIUM
Microsoft 365 E5SPE_E5
Microsoft 365 E5 (500 seats min)_HUBMicrosoft_365_E5
Microsoft 365 E5 (no Teams)Microsoft_365_E5_(no_Teams)
Microsoft 365 E5 Developer (without Windows and Audio Conferencing)DEVELOPERPACK_E5
Microsoft 365 E5 EEA (no Teams)O365_w/o_Teams_Bundle_M5
Microsoft 365 E5 EEA (no Teams) (500 seats min)_HUBO365_w/o_Teams_Bundle_M5_(500_seats_min)_HUB
Microsoft 365 E5 EEA (no Teams) with Calling MinutesMicrosoft_365_E5_EEA_(no_Teams)_with_Calling_Minutes
Microsoft 365 E5 EEA (no Teams) without Audio ConferencingMicrosoft_365_E5_EEA_(no_Teams)_without_Audio_Conferencing
Microsoft 365 E5 EEA (no Teams) without Audio Conferencing (500 seats min)_HUBMicrosoft_365_E5_EEA_(no_Teams)_without_Audio_Conferencing_(500_seats_min)_HUB
Microsoft 365 E5 SecurityIDENTITY_THREAT_PROTECTION
Microsoft 365 E5 with Calling MinutesSPE_E5_CALLINGMINUTES
Microsoft 365 E5 without Audio ConferencingSPE_E5_NOPSTNCONF
Microsoft 365 E5 without Audio Conferencing (500 seats min)_HUBMicrosoft_365_E5_without_Audio_Conferencing
Microsoft 365 E7MICROSOFT_365_E7

Frontline

LicenseString ID
Microsoft 365 F5 Security + Compliance Add-onSPE_F5_SECCOMP
Microsoft 365 F5 Security Add-onSPE_F5_SEC

Standalone & add-ons

LicenseString ID
Enterprise Mobility + Security G5 GCCEMSPREMIUM_GOV
Microsoft 365 A5 for facultyM365EDU_A5_FACULTY
Microsoft 365 A5 for StudentsM365EDU_A5_STUDENT
Microsoft 365 A5 for students use benefitM365EDU_A5_STUUSEBNFT
Microsoft 365 A5 without Audio Conferencing for students use benefitM365EDU_A5_NOPSTNCONF_STUUSEBNFT
Microsoft 365 GCC G5M365_G5_GCC
Microsoft 365 Security and Compliance for Firstline WorkersM365_SECURITY_COMPLIANCE_FOR_FLW
Microsoft Defender for IdentityATA