Skip to content

Home
Blog Posts
Scripts & Slide decks
Meeting Microsoft product teams
About | Morten Knudsen
- Disclaimer
Contact

Blog by Morten Knudsen about Microsoft Security, Azure, M365 & Automation

Home
Blog Posts
Scripts & Slide decks
Meeting Microsoft product teams
About | Morten Knudsen
- Disclaimer
Contact

Blog Posts

Posts by Category

Active Directory
Azure
Azure Arc
Azure Extensions
Azure LogAnalytics
Azure Security
Community
Defender for Cloud
Defender for Endpoint
Defender for Identity
M365 Security
Microsoft Defender Antivirus
Password Audit
Scripting
Sentinel

Posts by Recent Posts

Orphaned Azure Security Principals Clean-up & Azure Policy Managed Identity Role Assignment Automation
Automate Reporting of Defender for Cloud recommendations & Role Assignments with 35 different views
How to implement a gradual (ring) rollout-process for Microsoft Defender updates
How to save $$$ by storing your Syslog and Defender for Endpoint long-term logs in Azure Data Explorer cluster using Azure Data Factory and Azure Storage Account export – while keeping Kusto query functionalities ?
Sentinel Alert Rules Management with Add / Update / Remove & Alert Rule Action automation
Real example with 43% cost savings on Sentinel log-costs: How to exclude Syslog log-events from banned IPs using AbuseIPDB-service with integration to firewalls
Microsoft Defender Antivirus Performance Analyzer – understand which files, file extensions, or processes that might be causing performance issues on endpoints during antivirus realtime protection scans
How to do a Password Audit of your Active Directory passwords using DSInternals?
How to run custom scripts on thousands of servers within a few minutes using Azure Custom Scripts extension and multithreaded jobs – and have them re-run daily?
How to migrate from Qualys and enable Microsoft Defender Vulnerability Management (MdeTvm) in Microsoft Defender for Cloud?
How to detect File Deletions using Audit-data (SecurityEvent) & Azure LogAnalytics ?
How to detect impacted files by Controlled Folder Access and Attack Surface Reduction rules using Advanced Hunting queries ?
How to manually remove a malfunctioning MDI sensor, which cannot be removed through add/remove programs?
Meet me in Microsoft Security Insights Show Episode 132 – Security Private Preview MVPs!
How to do data transformation with Azure LogAnalytics – to enrich information, optimize cost, remove sensitive data?

About | Morten Knudsen

Microsoft MVP Security

Cloud & Security Architect

Microsoft Sentinel Black Belt

Microsoft Defender Black Belt

Microsoft Sentinel Influencer

Microsoft Defender for Cloud Influencer

Microsoft Cloud Security Product Champion

Azure Automation specialist

Microsoft Certified: Cybersecurity Architect Expert

Microsoft 365 Certified: Enterprise Administrator Expert

Microsoft Certified: Azure Solutions Architect Expert

Microsoft Certified: DevOps Engineer Expert

Microsoft Certified Trainer

Recent Posts

Orphaned Azure Security Principals Clean-up & Azure Policy Managed Identity Role Assignment Automation
Automate Reporting of Defender for Cloud recommendations & Role Assignments with 35 different views
How to implement a gradual (ring) rollout-process for Microsoft Defender updates
How to save $$$ by storing your Syslog and Defender for Endpoint long-term logs in Azure Data Explorer cluster using Azure Data Factory and Azure Storage Account export – while keeping Kusto query functionalities ?
Sentinel Alert Rules Management with Add / Update / Remove & Alert Rule Action automation

Tweets by knudsenmortendk

Privacy Policy
Terms
Contact

© 2023 Blog by Morten Knudsen about Microsoft Security, Azure, M365 & Automation • Built with GeneratePress