User Profile
ErikOppedijk
MCT
Joined Jun 28, 2020
User Widgets
Recent Discussions
Re: Microsoft Defender for Cloud | Environment settings - Question on Configuration
I also struggled with this, and this is what I think is the case: 1) Most defender plans don't use a LAW (Only "Server") 2) You can have many LAW inside a subscription (e.g. for application logging as well) 3) there is some "magic" happening when enabling some plans, namely that a defaultLAW will be created, with some "solutions" enabled by default. In your case you have made a LAW, and if you configure a VM to send logs to this, it doesn't have the right plans enabled to act on security incidents. By enabling the "Servers" plan, it will watch the data inside this LAW. To check which LAW is used, go to Settings Defender plans -> Settings and monitoring on the subscription level The "default workspace" probably has this enabled by default, and it is not visible in this list. Definitely a quirk, as well as all the hidden OMS Solutions that also are enabled.2.1KViews0likes0CommentsRe: MDATP network scanner fails to install
Now I'm a step further, next error is this one: Registration finished with an error: Unknown error. Status code: InternalServerError. Response body: Request: wdatpprd-eus2.securitycenter.windows.com/api/tvm/networkscan-pub/registration Exception - WDATP.MicrosoftGraphApiFetcher.General.AadException: Code: Request_BadRequest Message: The reference target 'Application' is invalid for the 'Owner' reference. Parameter name: reference Inner error: ...3.1KViews0likes0CommentsMDATP network scanner fails to install
When trying out the new network scanner, after authorizing the device through the URL I end up with this error: Starting network scanner registration Registration finished with an error: Unknown error. Status code: InternalServerError. Response body: Request: wdatpprd-eus2.securitycenter.windows.com/api/tvm/networkscan-pub/registration Exception - WDATP.MicrosoftGraphApiFetcher.General.AadException: Object reference not set to an instance of an object. Any ideas, tried it on several machines3.3KViews0likes1Comment
Recent Blog Articles
No content to show