User Profile
Sohel68
Copper Contributor
Joined 5 years ago
User Widgets
Recent Discussions
Looking for KQL query when high volume of USB writes happens by a user
Hello, I did some online search, but I couldn't find any working one yet. I'm looking for query which I can use in Advance threat hunting in MDE to generate an alert when a user copies huge number of data to an external USB drive. your help is much appreciated. thanks.3.7KViews0likes8CommentsHow to import bulk indicators to Microsoft defender security center
Hello, I'm new in Microsoft, I'm trying to import IoC's using a CSV file to "Microsoft Defender Security Center -> Indicators". I know how to do a single hash, but I'm looking for bulk import. sample file is not very hlepful. Any suggestions!! Thanks.8.3KViews0likes1CommentManaging Bitlocker from MEM vs Config manager
I'm new to Microsoft Bitlocker, currently we use McAfee to manage and encrypt our devices, however, the plan is to move all devices to Microsoft and manage them via Intune/MEM in a few months. I'm running into issues with Bitlcoker policies, they are not getting applied properly when applied from Intune/MEM. Microsoft support is recommending that I should consider using a standalone "MBAM". We have SCCM (Config manager) in place and our systems are co-managed. Our workload has been configured for Intune\MEM to manage "Endpoint protection". Questions: 1) Should I use SCCM (config manager) just for "Bitlocker" and disable "Bitlocker" policy in Intune\MEM? 2) Manage "Bitlocker" policy from Intune\MEM only? 3) Setup a standalone MBAM to manage "Bitlcoker"? Your help is much appreciated1.8KViews0likes3CommentsMigrating to Bitlocker
Hello all, I'm new to Microsoft, we have been a McAfee shop for a long time and now moving to Microsoft world. I have configured and created policies for Bitlocker in Intune, however, when I move systems to device group in Intune Bitlocker is not becoming active. Systems are hybrid joined. anyone migrated from McAfee encryption to bitlocker? and if so, can you share your experience? also, is it better to manage bitlocker policies from SCCM (configuration manager)?463Views0likes0Comments