Hardening Windows Clients with Microsoft Intune and Defender for Endpoint
Explore an approach at hardening clients in your organization by using Microsoft Intune and Defender for Endpoint to apply and mitigate some of the most common security misconfigurations. This blog unveils a centralized approach to automating asset management, deploying security baselines consistently, and minimizing the impact on end users. Learn valuable insights on planning, testing, and monitoring security policies, while discovering the power of attack surface reduction rules. Dive into this comprehensive guide and elevate your organization's security posture with streamlined solutions and proactive measures. Don't miss the chance to turn a major pain point into a significant win for your team!
Detection Engineering in Azure & Introducing AzDetectSuite
The AzDetectSuite is an open source project geared towards helping secure environments within Azure by utilizing KQL and Azure Monitor alerts. This heavily supplements the Azure Threat Research Matrix (ATRM) by supplying defensive content for the known techniques within Azure. This article will also cover what goes into a detection and how to develop a granular detection in a noisy environment.Identify organizational use/misuse of sensitive information using Microsoft 365 and Sentinel
Have you ever wondered if your users commonly downgrade Sensitivity Labels just to share the content externally, or how much of your sensitive content is processed by risky devices or users. Where is it processed? What if you could do it with organizational context added?Warn and Educate Users on Risky App Usage
We are pleased to announce the public preview for a new endpoint-based capability to allow management and control of Monitored cloud applications, manage these Monitored applications applying soft block experience for end-users when accessing these apps. Users will have an option to bypass the block.Learn more about Microsoft Security Communities.
In the last five years, Microsoft has increased the emphasis on community programs – specifically within the security, compliance, and management space. These communities fall into two categories: Public and Private (or NDA only). In this blog, we will share a breakdown of each community and how to join.
