Microsoft Defender for Identity sensor guide (v3.x)
Complete step-by-step guide to deploying and migrating to the Microsoft Defender for Identity (MDI) sensor v3.x and auditing included.
12 minute read
All articles (page 2)
Every Modern Security article on Microsoft Sentinel, Defender XDR, Entra ID, identity security and SOC operations, newest first.
Defender XDR advanced hunting tables: ingest directly into Sentinel data lake
Defender XDR advanced hunting tables now ingest directly into Sentinel data lake. No DCR, no analytics tier costs. Read how in my blogpost.
8 minute read
Manage your live response library directly in Microsoft Defender
Microsoft Defender for Endpoint now includes centralized library management for live response. Learn what it does, how to set it up.
4 minute read
UEBA behaviors layer in Microsoft Sentinel: from raw logs to behavioral intelligence
Learn about the UEBA behaviors layer in Microsoft Sentinel. What it does, how to enable it, and use it for investigation and threat hunting.
7 minute read
Microsoft Defender for Cloud Apps: AI agent monitoring and real-time protection
Learn how to set up Microsoft Defender for Cloud Apps AI agent monitoring. Covers inventory, advanced hunting, and real-time protection.
9 minute read
Proactively Block Cloud Apps (like AI) with Microsoft Defender for Cloud Apps and Defender for Endpoint
Learn how to block shadow IT and risky cloud applications (like AI apps) using Microsoft Defender for Cloud Apps with Defender for Endpoint.
14 minute read
Microsoft Sentinel data lake: implementation guide
Guide to implement Microsoft Sentinel data lake step-by-step, cost optimization, DCR transformation, advanced analytics and management.
21 minute read
Automatic Attack Disruption in Microsoft Defender XDR
Step-by-step guide to implementing Microsoft's Automatic Attack Disruption in Defender XDR, with all the configuration and products needed.
12 minute read
Selective Isolation in Defender for Endpoint – Combining tools like Velociraptor for DFIR
Use Microsoft Defender for Endpoint's Selective Isolation with Velociraptor to investigate compromised endpoints remotely, full DFIR without losing access.
7 minute read
Integrating Microsoft Defender EASM with Exposure Management
Integrate Microsoft Defender EASM with Exposure Management to enrich attack paths with external risk data and strengthen your posture.
5 minute read