The Advanced Hunting connector for Workbooks is GA in the Microsoft Defender portal. Point a workbook straight at DeviceProcessEvents, DeviceNetworkEvents and the alert tables — no Log Analytics ingestion required. With four cross-table KQL joins tested against real Defender for Endpoint telemetry.
Build Workbooks on Advanced Hunting Data — No Ingestion Required Read Post »
I’m thrilled to share that I’ve been awarded the Microsoft MVP status once again – this time in the Security
From MVP to Microsoft and Back Again: My Return to the Security MVP Community Read Post »
Introduction Modern cyberattacks are no longer linear or slow-moving. Adversaries pivot across identities, endpoints, and cloud workloads in minutes, exploiting
Predictive Shielding in Microsoft Defender XDR: Moving from Disruption to Anticipation Read Post »
Microsoft Defender for Servers offers two powerful protection tiers—Plan 1 and Plan 2—but knowing which one to choose (and how
Cyber threats are evolving in sophistication and scale. From phishing emails to credential theft, from privilege escalation to cloud data
Advanced Hunting Across Microsoft 365 Defender and Sentinel Read Post »
Security teams everywhere face the same challenge: too many alerts, too little time. Microsoft Defender for Cloud is designed to
Closing the Loop: How to Use Alert Feedback in Microsoft Defender for Cloud Read Post »
Security teams today face an overwhelming reality: attackers are stealthier, data volumes are exploding, and compliance requirements are tightening. With
Why a SIEM Needs a Data Lake: The Case of Microsoft Sentinel Read Post »
This brief post highlights the differences in feature availability depending on how your MX records are configured—specifically, whether they point
Defender for Office 365 Dual Use / Defense In-Depth Read Post »
In today’s interconnected world, managing cybersecurity across multiple tenants is both a challenge and an opportunity. For organizations and Managed
This article contain security best practices to use when you’re designing, deploying, and managing your Exchange Online solution by using Microsoft 365. The best practices are intended to be a resource for IT pros. This might include designers, architects, developers, and testers who build and work with secure Exchange Online solutions.
Exchange Online Security Best Practices – 10 Tips From The Field Read Post »
