Document to check if MDI alerts on suspicious activity

Copper Contributor

Hay 

A few month ago i found an official document of Microsoft that provide scripts and commands  that generate alerts on the defender portal MDI like enumerate actions.
Can someone pls send me the link to this document  ?

Thanks

1 Reply

Hi @eladfe,

 

This might not be exactly what you’re looking for but could be helpful if you’re looking to generate some alerts in the dashboard.

Attack Simulation in Defender XDR 

 

You could also run a few simple tools such as Bloodhound and/or Purple Knight.

 

Best,

Dylan