Rubrik announces Microsoft Defender integration

Rubrik has announced an integration with Microsoft Defender, allowing organisations to extend Microsoft Defender detections directly into Rubrik’s identity recovery workflows.

Joint Rubrik and Microsoft Defender customers can now correlate threat alerts with identity changes, reverse malicious identity modifications without performing full domain restores and restore trusted identity states using immutable recovery points.

The integration also touts the ability to maintain visibility across hybrid identity environments, including Active Directory and Entra ID.

“Detection is only half of the battle,” said Anneka Gupta, chief product officer at Rubrik.

“Organisations need the ability to quickly and surgically reverse malicious identity changes and completely restore their infrastructure. By combining Microsoft Defender’s threat detection with Rubrik Identity Resilience, we give security and IAM teams the power to move from a detected compromise to a trusted, recovered state in hours, instead of days.”

Over the past 15 months, Rubrik has expanded its identity capabilities, introducing recovery for Active Directory and Entra ID, expanding protection to multi-identity provider environments including Okta, and launching Identity Resilience capabilities that aim to help organisations investigate incidents and reverse malicious changes.

The company has also expanded ecosystem integrations with security platforms including CrowdStrike Falcon Identity Protection and now Microsoft Defender, connecting threat detection with automated remediation and trusted recovery.