Saif Khan·1d agoMFA Passed. The Attacker Still Got In: How SOC Analysts Hunt Stolen Sessions in Microsoft 365A practical Microsoft Sentinel + Defender XDR investigation guide for a threat that can hide behind a successful sign-in
Camilla Santoro·2d agoDetecting Attacks with Defender for Cloud AI ServicesMy main question is: how is it different from Azure AI Foundry Guardrails, and therefore why should we activate and pay for it?
Defend Microsoft365 now!·2d agoManaging Security Permissions with Microsoft Defender Unified RBACGuide to configuring Microsoft Defender Unified RBAC, creating custom roles, assigning permissions, and managing access across Microsoft…
Saif Khan·2d agoMicrosoft Sentinel in the Defender Portal: A Complete Hands-On SetupFrom Zero to Your First SIEM Detection — A Practical Guide for Aspiring SOC Analysts and Security Engineers
Victor Olawale·Nov 2Detecting Lateral Movement in Windows Environments: Using Microsoft Defender, Sysmon, and KQL to…Compromising one computer does not always mean an attacker has achieved their objective.
Vaasudev·Nov 1Building a Detection-as-Code Pipeline for Microsoft Sentinel (Part 3): Native Sentinel Repositories…In the first two parts of this series, I built a custom Detection-as-Code pipeline for Microsoft Sentinel.
Bindiya Priyadarshini·Oct 26The Patch Is Not the Proof: AWS EditionHunting PHP2Shell across AWS from Defender XDR, in KQLA response icon3A response icon3
Aravind·Oct 26Microsoft 365 Policy Sync & Propagation Times: A Complete Guide for IT AdministratorsUnderstanding when configuration changes take effect across Microsoft Entra ID, Intune, Exchange Online, Teams, Defender, and Purview.
Victor Olawale·Oct 26🔍 Detecting Suspicious PowerShell Activity with Microsoft Defender and Microsoft Sentinel
