This blog is about keeping long-term Sentinel logs, giving you insight to the options today – with great opportunities to …
Do you want to automate alert rules including creating new alert rules and update existing – with checks every x …
This is a real-life example of how I helped reduce the log-cost by 43% for LogAnalytics & Sentinel combined for …
Have you ever wondered what is causing your ‘Antimalware service executable’ (Defender Antivirus) to spike the CPU for longer times? …
Great job Michael Grafnetter Initially, I would like to thank the author of DSInternals, Microsoft MVP Michael Grafnetter, for creating …
Have you ever had a need to collect vital configuration status (inventory) from thousands of servers – with a defined …
Microsoft’s Defender Vulnerability Management is a built-in module in Microsoft Defender for Endpoint that can: If you’ve enabled the integration with Microsoft …
Recently I was asked to provide a solution to detect file deletions on a file server in a sensitive folder …
CONTROLLED FOLDER ACCESS RULES ControlledFolderAccess – All excluding Temp ControlledFolderAccess – Only Temp ATTACK SURFACE REDUCTION RULES ASR – All …
Microsoft Defender for Identity (MDI) has a built-in process that handles continues updates. I had a situation, where this process …