As mentioned in one of my previous post about the new auditing logs introduced in Microsoft Defender for Endpoint, I validated and tested several new custom detections that could add great value to your current detections. Custom detection to Sentinel I’m a big fan of using the power and flexibility of Sentinel. The current rules […]
Important correction [must read] At the time of creating the video looked over the fact that cloudappevents are available in the security.microsoft portal and that you can sync those using the Microsoft XDR connector. This means that what I say at 12:39 is not true and there is a way to get these logs into […]
Speaker session about incident response using Microsoft Defender at Cloud Technology Townhall Tallinn (cloudtechtallinn.com)
Had an incredible time at the recent Belgian Microsoft Cloud & Security Community Event, and I’m thrilled to share highlights from the event in my latest video! 🌐 Organizer Spotlight: Michael Van Horenbeeck Michael provided invaluable insights into what makes the community thrive and the incredible impact it has on fostering collaboration in the Microsoft […]
On 25 May, my colleague Thijs Lecomte & and I were guest at Come get IT. Sander Bruijs & Martijn Verheij, hosts of the podcast, invited us after hearing our talk about Incident Response using Microsoft Technology. You can listen to podcast via this link with timestamp 43:48CGIT Extra – Experts Live! 2023 – Come […]
Whether you are a beginner or an experienced practitioner in the field of ASR, this video is sure to provide you with valuable knowledge and insights. So sit back, relax, and enjoy this video about Attack Surface Reduction rules Links ASR references: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide Palantir’s blog: https://blog.palantir.com/microsoft-defender-attack-surface-reduction-recommendations-a5c7d41c3cf8 LSASS Twitter question: https://twitter.com/LouisMastelinck/status/1643652827493937152 Chapters –Chapters–0:00 intro 1:18 1. […]