Microsoft Defender for Endpoint Archives - Practical 365

New Features to Manage Inactive Devices in Microsoft Defender for Endpoint

Thijs Lecomte — Mon, 29 Jul 2024 10:00:00 +0000

Over the last year, Microsoft has released several new features to make management of inactive devices easier. In this blog, we review these features and build off our original blog post on "Handling Inactive Devices in Microsoft Defender for Endpoint."

The post New Features to Manage Inactive Devices in Microsoft Defender for Endpoint appeared first on Practical 365.

Practical Sentinel: Adding Networking Data to Microsoft Sentinel

Thijs Lecomte — Mon, 15 Jul 2024 10:00:00 +0000

Are you looking to ingest your data into Sentinel? In this episode of Practical Sentinel, we review use cases and tips for ingesting networking data into Sentinel.

The post Practical Sentinel: Adding Networking Data to Microsoft Sentinel appeared first on Practical 365.

Using KQL to Pull the Deployment Status of the Defender for Endpoint

James Yip — Tue, 18 Jun 2024 10:00:00 +0000

Defender for Endpoint gathers system information to support operation and detection needs. We can then leverage that data to build a custom report to show the deployment status. This blog walks through that process using KQL.

The post Using KQL to Pull the Deployment Status of the Defender for Endpoint appeared first on Practical 365.

Enhance Mobile Security in MAM with Defender for Endpoint

James Yip — Wed, 03 Jan 2024 11:00:00 +0000

In this article, we discuss how to enhance mobile security in MAM, focusing on the Defender for Endpoint functionality and features related to mobile devices, specifically for BYOD scenarios.

The post Enhance Mobile Security in MAM with Defender for Endpoint appeared first on Practical 365.

Running Defender for Endpoint on Non-Windows Devices

Thijs Lecomte — Wed, 02 Aug 2023 10:00:00 +0000

Over the past few years, Microsoft has proven to have a worthy security product in Microsoft Defender for Endpoint (MDE) for Windows devices. While most talk about Windows when discussing Microsoft Defender, it also supports MacOS, Linux, Android, and iOS. The question arises whether MDE is a mature product for these platforms and if you can entrust Microsoft to protect devices running these operating systems.

The post Running Defender for Endpoint on Non-Windows Devices appeared first on Practical 365.

Use Microsoft 365 Defender and Sentinel to Defend Against New Zero-Day Threats: Part II

Thijs Lecomte — Thu, 17 Nov 2022 11:00:00 +0000

This article continues the discussion of the main steps needed to mitigate a zero-day threat Using Microsoft 365 Defender and Sentinel.

The post Use Microsoft 365 Defender and Sentinel to Defend Against New Zero-Day Threats: Part II appeared first on Practical 365.

Handling Inactive Devices in Microsoft Defender for Endpoint

Thijs Lecomte — Wed, 03 Aug 2022 10:00:00 +0000

Managing inactive devices is a confusing concept for an administrator just starting with Microsoft Defender for Endpoint. This article will provide key insights on how organizations can handle inactive devices within Microsoft Defender for Endpoint.

The post Handling Inactive Devices in Microsoft Defender for Endpoint appeared first on Practical 365.

Day-to-day Management for Microsoft Defender for Endpoint

Thijs Lecomte — Wed, 29 Jun 2022 05:37:00 +0000

Microsoft Defender for Endpoint is not a product you roll out and forget. To get the most out of this tool on a day-to-day basis, we walk through some actions administrators should be doing to keep current with the product.

The post Day-to-day Management for Microsoft Defender for Endpoint appeared first on Practical 365.