Event banner

Microsoft Defender for Office 365 Ask Microsoft Anything

Event Ended
Wednesday, May 31, 2023, 09:00 AM PDT
In-Person

Event details

This March we announced the public preview of collaboration security for Microsoft Teams. We are bringing the full feature set that customers use to protect their email environments across prevention, detection, and response to Microsoft Teams. 

 

We are excited to bring collaboration security into the XDR SOC experience in Microsoft 365 Defender and help defenders protect their Microsoft Teams environment from emerging threats with end-to-end prevention, detection, and protection capabilities - so that organizations can continue to collaborate with confidence. 

 

An AMA is a live text-based online event similar to a “YamJam” on Yammer or an “Ask Me Anything” on Reddit. This AMA gives you the opportunity to connect with Microsoft product experts who will be on hand to answer your questions and listen to feedback. 

 

Feel free to post your questions about collaboration security for Microsoft Teams anytime in the comments before the event starts, although the team will only be answering questions during the live hour! 

Trevor_Rusher
Updated May 31, 2023

57 Comments

  • faizaldev's avatar
    faizaldev
    Copper Contributor
    Hello Admin, How to Joint / Link Microsoft Teams, thanks.
  • Steven-H's avatar
    Steven-H
    Brass Contributor

    Are there any plans to allow security operators to take bulk actions on actions pending approval without having to navigate outside of the incident? Right now, you can take action on one item at a time from the incident but if you have, say, 100 pending actions then you have to take note of what was included in the incident, then navigate out to the action center then find the items associated with the incident and take action on it.

    • johnengels's avatar
      johnengels
      Icon for Microsoft rankMicrosoft

      Steven - you should be able to multi-select items in the incident's evidence list and approve them. It'll give you fewer options than if you select them one by one, but should give you approve/reject.

  • Trevor_Rusher's avatar
    Trevor_Rusher
    Icon for Community Manager rankCommunity Manager
    Welcome to the Microsoft Defender for Office 365 AMA! This live hour gives you the opportunity to ask questions directly to the Microsoft team. Please post any questions in a separate, new comment thread on this event. Thanks for coming!
  • sedricbeasley's avatar
    sedricbeasley
    Copper Contributor
    The license in E5 covers Windows devices that are considered workstations but; what about servers. I was told that the license does not cover servers and how would you protect your datacenter if users are using a server directly.
  • Trevor_Rusher's avatar
    Trevor_Rusher
    Icon for Community Manager rankCommunity Manager
    Hey all! I'm excited to share this upcoming AMA with the Defender for Office 365 team! Remember to please ask your questions down here in a new comment thread. Just a reminder- you can ask them at any time leading up to or during the event but the team won't be answering questions until the live hour. Thanks!
  • RuffyM's avatar
    RuffyM
    Copper Contributor
    We recently presented Defender for Office 365 to a customer in evaluation mode. After the configuration was completed, we couldn't get back to the routing settings although in the evaluation tour in step 2 it's said: "Update your routing setting and users, groups and domains included, and other capabilities." It seems that it was possible in earlier versions. Did that change and will it be possible again in the next version?
    • RuffyM's avatar
      RuffyM
      Copper Contributor

      Hi John, I refer to https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/try-microsoft-defender-for-office-365?view=o365-worldwide#set-up-an-evaluation-or-trial-in-audit-mode, topic 4 'In the Help us understand your mail flow dialog, configure the following options:'
      After the set up was completed we couldn't edit the mail flow settings via 'Manage evaluation settings'.

       

    • stevenp1960-2009's avatar
      stevenp1960-2009
      Copper Contributor
      Hi Ralf, I checked you out on LinkedIn but can't connect w/ you. Please keep in touch w/ me best you can. Ty, https://www.linkedin.com/in/stevenpalange/
      • johnengels's avatar
        johnengels
        Icon for Microsoft rankMicrosoft
        Hi Ralf - when you say 'routing' are you meaning call routing, email routing, etc.? Need a bit more info to figure out where to help get the question answered.
  • ; ) This is great! FYI, most of my over 500 clients will NOT NOT NOT move their endpoint security to Defender or MS because they won't get any support. They can't get presales support or post-sales technical support. I look forward to discussing this and other issues. In almost 30 years of being a reseller and MSSP for over 500 companies, I have yet to meet and speak to an MS employee.
    • rsbedard's avatar
      rsbedard
      Copper Contributor
      For those of you who might be interested, we launched Indominus Managed Security in January to address this very problem. We offer a managed instance of Defender for endpoint/for business with 7/24 support and we automated most of the on-boarding. We also optionally offer managed vulnerabilities and updates for Windows devices. We target small and medium businesses who otherwise would not be able to hire/retain cybersecurity professionals. Let me know if we can help.
    • Audio Maverick's avatar
      Audio Maverick
      Copper Contributor
      I fell similarly. The model of having to be aligned with a solution provider instead of an inhouse team is common across the modern business spectrum. But, it leaves one to be upfronted with additional costs for service whenever anything goes awry. Service is not inherently bundled with the product, and costs vary with the provider. Everything is going to the "as a service" model. For me, that means added costs and hits to the bottom line. The question is if it is worth the cost to run Defender over the competition. Microsoft still has a at least a perceived view that their defense solution is not as good as most other premium services in this category, whether or not it is founded. I had a client fall victim to the recent 3CX Trojan issue . They were running Trend Micro Apex One in house on most of their systems, and it didn't have any idea they were collecting multiple malware instances. The few units on the built-in Windows Defender caught the downloads after the initial infection, which is better than most AV applications faired.
Location
Microsoft Tech Community
Date and Time
May 31, 20239:00 AM - 10:00 AM PDT