Investigation using Defender
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Azure Enterprise Applications (Microsoft Apps)
Join us in discord here: https://aka.ms/azurediscord.
Extract EntraID Enterprise Apps sign-in logs
PowerShell is a cross-platform (Windows, Linux, and macOS) automation tool and configuration framework optimized for dealing with structured data (e.g. JSON, CSV, XML, etc.), REST APIs, and object models. PowerShell includes a command-line shell, object-oriented scripting language, and a set of tools for executing scripts/cmdlets and managing modules.
Defender EASM - High values CVE's not showing on High priority observations
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Microsoft data classification and PowerBI
Everything you need to know about Power BI: news, resources, and a community of users ready to answer questions!
Changing the junk email sensitivy just for one mailbox
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Microsoft licensing usage
Microsoft 365 is an all-in-one modern workplace platform. We're here to grow and learn together, on everything from Windows AutoPilot to Robotic Process Automation.
Receiving emails which are not for me on my gmail
Welcome to r/GMail, an unofficial sub for Google's Gmail. DO NOT MESSAGE MODERATORS WITH YOUR QUESTIONS, WE DO NOT ANSWER POST QUESTIONS THROUGH MODMAIL Do NOT post real email addresses in the sub to avoid being targeted by scammers.
Comparison Defender vs Cisco Umbrella
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Issues with using Defender API to manage Tags
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Create URL block for all users except a group
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Analytic rules for Microsoft Sentinel based on MS EASM
Find evidence that a user sent an email
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Get sharepoint site owners and site admins
PowerShell is a cross-platform (Windows, Linux, and macOS) automation tool and configuration framework optimized for dealing with structured data (e.g. JSON, CSV, XML, etc.), REST APIs, and object models. PowerShell includes a command-line shell, object-oriented scripting language, and a set of tools for executing scripts/cmdlets and managing modules.
Licensing information - differences between Audit Logs and Azure AD
Microsoft 365 is an all-in-one modern workplace platform. We're here to grow and learn together, on everything from Windows AutoPilot to Robotic Process Automation.
Scripts organization, management and scheduling
PowerShell is a cross-platform (Windows, Linux, and macOS) automation tool and configuration framework optimized for dealing with structured data (e.g. JSON, CSV, XML, etc.), REST APIs, and object models. PowerShell includes a command-line shell, object-oriented scripting language, and a set of tools for executing scripts/cmdlets and managing modules.
EPSS score - where is it?
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Difference between Device Inventory Dashboard and KQL query
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
KQL query issue - missing some devices
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Hunting for data related to priviledge escalation (like app installs)
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Same device with Onboarded and Not Onboarded status
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
Setting up a MS Defender tag on a device
PowerShell is a cross-platform (Windows, Linux, and macOS) automation tool and configuration framework optimized for dealing with structured data (e.g. JSON, CSV, XML, etc.), REST APIs, and object models. PowerShell includes a command-line shell, object-oriented scripting language, and a set of tools for executing scripts/cmdlets and managing modules.
Use powershell to add a tag to a MS Defender XDR device
PowerShell is a cross-platform (Windows, Linux, and macOS) automation tool and configuration framework optimized for dealing with structured data (e.g. JSON, CSV, XML, etc.), REST APIs, and object models. PowerShell includes a command-line shell, object-oriented scripting language, and a set of tools for executing scripts/cmdlets and managing modules.
Add image to lock screen
A reddit dedicated to the profession of Computer System Administration.
Defender for Identity sensors communication over TCP Port 3389
Microsoft Defender XDR is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. This is a support community for those who manage Defender for Endpoint.
