How to detect File Deletions using Audit-data (SecurityEvent) & Azure LogAnalytics ?
Recently I was asked to provide a solution to detect file deletions on a file server in a sensitive folder …
How to detect impacted files by Controlled Folder Access and Attack Surface Reduction rules using Advanced Hunting queries ?
CONTROLLED FOLDER ACCESS RULES ControlledFolderAccess – All excluding Temp ControlledFolderAccess – Only Temp ATTACK SURFACE REDUCTION RULES ASR – All …
How to manually remove a malfunctioning MDI sensor, which cannot be removed through add/remove programs?
Microsoft Defender for Identity (MDI) has a built-in process that handles continues updates. I had a situation, where this process …
Meet me in Microsoft Security Insights Show Episode 132 – Security Private Preview MVPs!
On December 14, I had the pleasure of participating in a live show, Microsoft Security Insights Show. The topic was …
How to do data transformation with Azure LogAnalytics – to enrich information, optimize cost, remove sensitive data?
One of the cool features in Azure LogAnalytics is the capability to do data-transformation before the data enters your LogAnalytics …