Just another day of IR, Threat-Hunting & Microsoft Security
Roses are red, Violets are blue, and if initial access has been successfully done, your network is probably gone. Managing a comprehensive security product and control can be complicated, requiring a cumbersome environment and device...
Managing comprehensive security products and controls can be complicated, requiring a specific skill set and control over the security process. In addition to managing complexity is tracking where the simulation activities, alerts, and results are...
This paper describes how to manually deploy Microsoft Defender for Endpoint on Ubuntu 20.04 with a few tips, experience from the field, and much more. Microsoft expands its Microsoft Defender for Endpoint ecosystem to match...
Managing comprehensive security products and security controls can be complicated, requiring a specific skill set and controlling all over the security process. In addition to managing complexity is tracking where the simulation activities, alerts, and results...
Roses are red, Violets are blue, and if initial access has been successfully done, your network is probably gone. Managing a comprehensive security product and control can be complicated, requiring a cumbersome environment and device...
Are your Intune local users configure as local admin? Do you’ve got additional admin users on Intune devices? In most cases, Intune users could are the Local administrators, and it’s a Feature without any disruption,...
Recently Microsoft announced that Microsoft Defender for Endpoint now has the EDR block mode. From the earliest days of Microsoft Defender for Endpoint (the WDATP days), there was a conflict between the Microsoft Defender Anti-Virus...
In this Microsoft Defender for Endpoint (MDE) series, we’re going to show, configure, discuss, and simulate how Microsoft Defender for Endpoint can integrate and how it works with other Microsoft security control. The Microsoft Defender...
