User Profile
bbhorrigan
Brass Contributor
Joined Sep 27, 2017
User Widgets
Recent Discussions
Long term Microsoft Security viability
Dear Security Experts, I come to you with a question born out of genuine concern and respect. For approximately two decades, my career has been closely tied to Microsoft, with a significant focus on its ecosystem. Recently, my attention has been drawn towards the security services provided by Microsoft, particularly around Defender. My question, posed with all due positivity, revolves around the confidence we can place in Microsoft at this juncture. This concern is particularly pertinent in light of the security lapses we've witnessed, including the notable incident this past summer involving the compromise of the MSA key by external actors. The current Russia breach situation. Such events often leave us without a clear understanding of their mechanics. Despite this, the expectation remains that we entrust our most critical data to these services. Having been a staunch advocate for Microsoft throughout my career, I am increasingly apprehensive about the future efficacy of its security practices. Am I the only one?354Views1like0CommentsRe: Adding to Distribution List
It sounds like you need to create a mail object for the user in your environment, that way it can be easily referenced, and doesn't have to be an internal object. I would just create a mail contact. https://docs.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-mail-contacts5.2KViews0likes8CommentsRe: Investigating identity threats in hybrid on prem and cloud environments
Very well put together. Reading thru the documentation here. https://docs.microsoft.com/en-us/cloud-app-security/tutorial-ueba I was curious if there is anymore information that describes how the priority score is created? "Use the Investigation priority score to determine which users to investigate first. Cloud App Security builds user profiles for each user based on analytics that take time, peer groups, and expected user activity into consideration. Activity that is anomalous to a user's baseline is evaluated and scored. " Yossi Basha5.1KViews0likes0CommentsIntune viewing by Device type
Is there any easy way to change the way you view in device view? Even in the filter columns on the right hand side, its really hard to make it sort by anything except the device name. In the iOS/Android world, that is literally the worst name to sort by and it seems to be the default here.887Views0likes2Comments
Recent Blog Articles
No content to show