unified sensor

The unified sensor tag covers Microsoft Defender for Identity sensor v3.x, which merges endpoint and identity protection into a single deployment on modern domain controllers. Discussions highlight the sensor's use of Windows Filtering Platform (WFP) for RPC auditing, simplified setup, and operational trade-offs such as limited feature parity compared to previous sensor versions. Content focuses on deployment considerations, security visibility improvements, and practical advice for IT security teams evaluating the switch to the unified sensor model.