Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: MDATP - Deployment Guide & Best Practices? David Caddick - here's the MDATP onboarding step by step guide - deployment options:https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/onboard-configure
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagSafeguard & Protect Your Custom Copilot Agents (Cyber Dial Agent) Overview and Challenge Security Operations Centers (SOCs) and InfoOps teams are constantly challenged to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). Analysts often spend valu...Accelerating the Anomalous Sign-Ins detection with Microsoft Entra ID and Security Copilot Overview In today’s complex threat landscape, identity protection is critical for securing organizational assets. A common sign of compromise is user activity indicating connections from multiple l...KQL Migrator powered by Microsoft Security Copilot Overview A couple of weeks ago, Hesham and Hiten attended an internal Global Blackbelt summit in Redmond. Unfortunately, we encountered bad weather due to a “Bomb Cyclone”. Consequently, many peopl...Identity forensics with Copilot for Security Identity Analyst Plugin Microsoft Copilot for Securityis a platform that brings together the power of AI and human expertise to help administrators and security teams respond to attacks faster and more effectively. Copilot ...Analyzing Endpoints Forensics - Azure Sentinel Connector Devices (IT/OT) health state and security configurations policies and settings view are critical to SOC team helping them to address the following use cases: Identifying onboarded devices and...Microsoft Defender Security Insights in Azure Sentinel Microsoft Secure Score is a measurement of an organization's security posture, with a higher number indicating more improvement actions taken. Following the Secure Score recommendations can protect y...Group-IB Threat Intelligence and Attribution Connector - Azure Sentinel Are you using Group-IB Threat Intelligence (TI&A) system and looking for a custom connector to integrate with Azure Sentinel and your SOC team can create custom analytics detection rules to automatic...Azure Sentinel All-In-One Accelerator Being a hands-on Cyber - Security person interested in piloting Azure Sentinel, we have your back with Azure Sentinel All-In-One Accelerator to speed up the deployment and initial configuration tasks...Azure Defender for IoT Raw-Data and ICS MITRE ATT&CK Matrix Mapping via Azure Sentinel A series of major cyberattacks across industries served as a wake-up call that the traditional “air-gapped” model for OT cybersecurity had become outdated in the era of IT/OT convergence and initiati...Microsoft Cloud App Security (MCAS) Activity Log in Azure Sentinel The Microsoft Cloud App Security (MCAS) connector lets you stream alerts and Cloud Discovery logs from MCAS into Azure Sentinel. This will enable you to gain visibility into your cloud apps, get soph...
MicrosoftMicrosoftMicrosoftMicrosoft
