TEC Conference 2024: CA masterclass
OneDrive link: TEC Tenant creation video Helpfull url’s Entra portal MFA setup Things we want to share Wifi
Experts live Belgium Cafe
Community event: talk about PIM
Experts live 2024
Mastering Privileged Identity Management (PIM): From Basics to Advanced Strategies PIM at Its Core:Privileged Identity Management (PIM) is Microsoft’s solution for permissions and access. Managing who has access to which administrative role, when, and where is foundational to a secure environment. Join us to delve deeper into the power of PIM, where security and control […]
Thrive Conference 2024
21 & 22 may @Slovenia
Microsoft Defender for Endpoint custom auditing alerts
As mentioned in one of my previous post about the new auditing logs introduced in Microsoft Defender for Endpoint, I validated and tested several new custom detections that could add great value to your current detections. Custom detection to Sentinel I’m a big fan of using the power and flexibility of Sentinel. The current rules […]
Microsoft Defender for Endpoint auditing capabilities
Important correction [must read] At the time of creating the video looked over the fact that cloudappevents are available in the security.microsoft portal and that you can sync those using the Microsoft XDR connector. This means that what I say at 12:39 is not true and there is a way to get these logs into […]
Fear of configuring the outbound anti-spam policy [with KQL]
What is the out-bound spam policy Exchange Online Protection allows us to define an outbound spam policy. In many environments I encounter, the outbound spam policy is often left at its default settings. This means that any email address can potentially send unlimited emails externally and internally (restricted to 0 an hour), and might also […]