Kurt Shintaku's Blog

Defender for Identity (MDI) is introducing a new sensor type for Active Directory Certificate Services (ADCS).

• AD CS is a Windows Server role that issues and manages public key infrastructure (PKI) certificates in secure communication and authentication protocols.
• AD CS can be part of a domain controller, in which case, no extra actions are needed. However, if your AD CS is on it’s own server, you must make sure that events are being collected from that server.

If your sensor is installed on a domain controller with AD CS, you’ll view additional security content, such as related alerts and Secure Score reports.

Read more at:

• What’s new – Microsoft Defender for Identity: "New Sensor Type for Active Directory Certificate Services”
  https://learn.microsoft.com/en-us/defender-for-identity/whats-new#new-sensor-type-for-active-directory-certificate-services-ad-cs