cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Microsoft Security Experts Blog
Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community
Find out more
Options
1,006

Catch Defender Experts for Hunting on the Ninja Show

Elisa_Lippincott on Mar 14 2023 04:33 PM
Join us on March 16, 2023 at 9:00am PT or watch later on-demand  
8,746

Good UAL Hunting

EmilyParrish on Jan 18 2023 09:31 AM
In this blog post, we will be taking a deeper dive into the Office 365 Unified Audit Log (UAL).
2,745

NEW SERIES: Security Experts Roundtable coming January 25, 2023

BrookeLynnWeenig on Dec 19 2022 12:01 PM
Introducing our newest webinar series within Microsoft Security.  
1,489

​​How to Set Security Budget and Controls to Identify Threats Faster

BrookeLynnWeenig on Dec 08 2022 09:00 AM
​​Lauren Podber offers recommendations for how organizations can build security controls and budgets.
9,294

Microsoft Defender Experts for XDR now in preview

Elisa_Lippincott on Nov 22 2022 08:22 AM
We are excited to announce that Microsoft Defender Experts for XDR is now officially in preview. We are excited to annou...
4,228

Using Microsoft Security APIs for Incident Response - Part 2

TroyLainhoff on Nov 01 2022 09:00 AM
This blog is part two of a three-part series focused on facilitating programmatic data pulls from Microsoft APIs.
39.9K

Forensic artifacts in Office 365 and where to find them

EmilyParrish on Sep 26 2022 09:26 AM
In this article, we aim to provide some explanations and tips for investigators to use to be able to easily understand i...
3,811

Industry Expert Series: What keeps an AppSec CTO up at night?

BrookeLynnWeenig on Sep 15 2022 10:27 AM
Veracode Co-founder/Chief Technology Officer Chris Wysopal shares insights on app security and why automation should be ...
3,826

Industry Expert Series: Wireless Security- How to Better Protect Devices and Networks

BrookeLynnWeenig on Aug 22 2022 09:00 AM
Viszen Security Founder Jennifer Minella shares insights on wireless security and conditional access.
11K

Using Microsoft Security APIs for Incident Response - Part 1

TroyLainhoff on Aug 19 2022 11:04 AM
This blog series highlights ways you can leverage an Azure AD application registration and OAuth authentication to allow...
11.5K

Part 2: LockBit 2.0 ransomware bugs and database recovery attempts

Danielle_Veluz on Mar 11 2022 10:02 AM
In the previous blog post in this series, we provided background about our analysis of the LockBit 2.0 ransomware and de...
16.7K

Part 1: LockBit 2.0 ransomware bugs and database recovery attempts

Danielle_Veluz on Mar 11 2022 10:01 AM
Microsoft Detection and Response Team (DART) researchers have uncovered “buggy code” and critical inconsistencies in the...
23.1K

Leveraging the Power of KQL in Incident Response

Danielle_Veluz on Jan 04 2022 09:00 AM
In this blog, we’ll show you how the Microsoft Detection and Response Team (DART) uses the Kusto Query Language (KQL) to...

Latest Comments

Reza_Ameri
in Total Identity Compromise: DART lessons on securing Active Directory on Mar 11 2023 12:30 PM
Thank you for sharing this valuable article.The real problem is on the practice, when we want to adapt these recommendations in the real-world it is not easy. Sometimes IT admins don't have time to read.
1 Likes
SystemEngineer
in Total Identity Compromise: DART lessons on securing Active Directory on Mar 11 2023 03:06 AM
Thank you @matthewzorich for sharing such great article summary, this really helps us to secure the environment better.
1 Likes
Ma-tth
in Total Identity Compromise: DART lessons on securing Active Directory on Mar 01 2023 07:39 AM
@matthewzorich Thank you, this is a help for practical work, it explains the topics well and at the same time is a collection of important topics
2 Likes
Extreme775
in Part 2: LockBit 2.0 ransomware bugs and database recovery attempts on Jan 30 2023 11:32 AM
Hi @Danielle_Veluz, This is amazing! Can you share your code to extract the IV and Key code in c++? Thanks.
0 Likes
DCoombe1450
in Leveraging the Power of KQL in Incident Response on Jan 06 2023 10:18 AM
Awesome post. Is EventsWithinTimeframe() available on Microsoft's Github page as I couldn't find it.
0 Likes