CCIS: CrowdStrike Certified Identity Specialist

Disabling a risk detection creates a visibility gap: potentially malicious lateral-movement activity that matches that detection will not generate Identity Protection detections. Microsoft Entra ID Protection risk detections are intended to identify suspicious identity-related activity, while Defender for Identity detects lateral-movement attempts.