playbooks

5 Topics

Anusorn Setraksa
email address removed for privacy reasons
anuson_gang
Nov 25, 2024 Place Microsoft Defender XDR
21Views
0likes
0Comments
Entra ID protection - Integration into Defender XDR
Hi everyone, is it possible to integrate this into Defender? Or is there a hunt or Cloud App Policy that will trigger an Alert in Defender Portal? BR Stephan
Solved
StephanGee
Sep 02, 2024 Place Microsoft Defender XDR
2.3KViews
1like
8Comments
Do Defender XDR Custom RBAC Roles stack?
Are permissions granted by Defender XDR Unified RBAC Custom Roles additive? For instance, if a user uses PIM to assume a role with permissions A & B, and then uses PIM a second time to assume a role with permissions C & D, will the user then have permissions A, B, C, & D? Or will they only have permissions C & D?
Solved
SKadish
Feb 15, 2024 Place Microsoft Defender XDR
511Views
0likes
2Comments
Recording available: Incident response - business email compromise - Ninja Show
In case you missed the show, here is the recording: https://youtu.be/h9YEr9XwALU Please keep this conversation going here and also ask your questions!
HeikeRitter
Nov 09, 2023 Place Microsoft Defender XDR
979Views
3likes
2Comments
Incident response: investigating a ransomware attack - Ninja Show
If you have any questions after watching this episode, please don't hesitate to ask them! Part 1:https://youtu.be/eLCrGe4-Zzc Part 2:https://youtu.be/q1s7lm3O9Sc Currently we have playbooks for ransomware,BEC attacks and for phishing incidents. Question for you all: what additionaltypes of incidents would you like us to provide playbooks for?
HeikeRitter
Jun 26, 2023 Place Microsoft Defender XDR
1.4KViews
1like
1Comment