#DefenderForEndpoint

PJRouse

@pjrouse.bsky.social

2 months ago

Level up your Defender for Endpoint deployment with Custom Compliance. Having worked on many Microsoft Defender for Endpoint (MDE) deployments and migrations I know how important it is to ensure that the…

Excited to share my latest article on Medium: “Level Up Your Defender for Endpoint Deployment with Custom Compliance”!

paul-82465.medium.com/level-up-you...

#Defender #MDE #DefenderForEndpoint #M365Security #DefenderXDR

Riccardo Corna

@itspecialist.cloud

2 months ago

What's new in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint Learn about the latest Microsoft Defender for Endpoint preview and generally available (GA) features, and security features in Windows 10 and Windows Server.

New #DefenderforEndpoint updates: faster onboarding for Windows/Linux, custom telemetry, and new predictive shielding actions to harden exposed endpoints.
Stay ahead → learn.microsoft.com/en-us/defend...

Alex Verboon

@vacyber.bsky.social

3 months ago

[New Blogpost] - Modern Security for Legacy Systems
- Defender for Endpoint on Windows 7

medium.com/@verboonalex...

#DefenderXDR #DefenderforEndpoint #Windows7

Levacloud ~ Microsoft Security + Compliance

@levacloud.com

4 months ago

From onboarding failures to passive mode conflicts and network blocks, our latest guide breaks down the most common causes (and how to fix them) so you can restore full protection fast.

levacloud.com/2025/10/29/d...

#MicrosoftDefender #EndpointSecurity #DefenderForEndpoint #MDESecurity #Levacloud

Peter van der Woude

@pvanderwoude.bsky.social

9 months ago

New blog post: Getting started with the Microsoft Defender Browser Protection extension for Google Chrome
petervanderwoude.nl/post/getting...
#MSIntune #Intune #EMS #MDM #Windows10 #Windows11 #GoogleChrome #MDE #DefenderForEndpoint #SmartScreen

Alex Verboon

@vacyber.bsky.social

11 months ago

Use #KQL to identify the use of Portable Apps across your #DefenderforEndpoint devices

github.com/alexverboon/...

PJRouse

@pjrouse.bsky.social

1 year ago

ASR Rule Alerting — Don’t assume! Over the last few years I’ve helped many organisations deploy Microsoft Defender for Endpoint, and when it comes to implementing Attack…

Having worked extensively with Attack Surface Reduction (ASR) Rules recently, I thought it would be good to share some knowledge in relation to ASR alerting (or in some cases the lack of).

paul-82465.medium.com/asr-rule-ale...

#DefenderforEndpoint #ASR #MDE #AttackSurfaceReduction

Levacloud ~ Microsoft Security + Compliance

@levacloud.com

1 year ago

Identifying vulnerabilities is just the first step—how you assess, prioritize, and remediate them defines your security posture.

Read more: levacloud.com/2025/02/26/v...

#CyberSecurity #MicrosoftSecurity #VulnerabilityAssessmentProcess #DefenderForEndpoint #DefenderForCloud #Intune #RiskManagement

Levacloud ~ Microsoft Security + Compliance

@levacloud.com

1 year ago

@levacloud.bsky.social Tamper Protection in Microsoft Defender for Endpoint - Learn how to configure and enforce it in our newest blog post to prevent attackers from disabling security settings.

levacloud.com/2025/02/25/t...

#DefenderForEndpoint #TamperProtection #Levacloud #MicrosoftSecurity

Alex Verboon

@vacyber.bsky.social

1 year ago

[Tip!] Still running MMA for Defender for Endpoint on older Windows Servers/Clients? Not sure? Then check out these queries:

github.com/alexverboon/...

#DefenderForEndpoint #Security #StayCurrent

Tom Wechsler

@tomwechsler.bsky.social

1 year ago

Microsoft_Graph/Microsoft_365/Defender/Defender_alerts.ps1 at main · tomwechsler/Microsoft_Graph Manage Azure and Microsoft 365 with the Microsoft Graph PowerShell SDK! - tomwechsler/Microsoft_Graph

Microsoft 365 Defender for Endpoint - Microsoft Graph and PowerShell - List alerts for advanced hunting!
@microsoft.com @microsoft365.bsky.social @github.com @mvpaward.bsky.social #Microsoft #MicrosoftGraph #PowerShell #mvpbuzz #Security #coolstuff #DefenderForEndpoint
👇👇👇
github.com/tomwechsler/...

Robbe Van den Daele

@robbevddaele.bsky.social

1 year ago

Device isolation and containment strategies Introduction As a Security Operation Center, you want to be able to contain devices and users on a network as a response to an adversary event. However, depending on the security stack you are usin...

In my latest blog post, I wanted to talk about the nuances most organizations overlook with #defenderforendpoint device isolation and containment, and how these capabilities can co-exist next to containment actions via networking equipment.

hybridbrothers.com/device-isola...

#Microsoft

Tom Wechsler

@tomwechsler.bsky.social

1 year ago

Microsoft 365 Defender for Endpoint - Advanced hunting on suspicion with Kusto Query Language!
@microsoft.com @msftsecurity.bsky.social @github.com @microsoft365.bsky.social #Microsoft #KustoQueryLanguage #EMS #mvpbuzz #Security #coolstuff #DefenderForEndpoint
👇👇👇👇
github.com/tomwechsler/...

Doug Does Tech

@dougdoestech.bsky.social

1 year ago

Control USB Devices using Defender for Endpoint and Intune (Device Control) YouTube video by Doug Does Tech

🚀 Need to control USB device access in your organization? Here is how I created a policy using Intune! Learn how to block unauthorized USBs and ensure data security. Watch now! 📺🔒 #CyberSecurity #Intune #DefenderForEndpoint youtu.be/TpPPjQfBzCI

Shehan Perera

@shehanperera.bsky.social

1 year ago

How a Synthetic Registration in Entra ID Can Protect the Devices ASAP with Defender for Endpoint? One of the popular queries I have got by working with many customers for their Defender for Endpoint deployment projects is We need the Defender Security Policies to be assigned and working as soon…

✨ #blog An excellent feature to close the gap when endpoints aren’t registering with Entra and not enrolling in Intune as expected.

#MicrosoftEntra #DefenderXDR #DefenderforEndpoint #EndpointSecurity #MicrosoftIntune

wp.me/pb2Sd0-2rZ

DylanInfosec🛡️

@attackthesoc.com

1 year ago

Would love if we could have the domain categorization info as part of the Domain page in the Defender portal instead of having to go digging in the web protection reports

#DefenderforEndpoint

Jeroen Burgerhout ☁️ | MVP

@jeroen.burgerhout.org

3 years ago

Looking for a contact within Microsoft who can tell me more about this : . It's in beta and a customer wants to know when this is out of beta. #security #defenderforendpoint #defender

docs.microsoft.com/en-us/microsof…

Nathan McNulty

@nathanmcnulty.com

4 years ago

#DefenderForEndpoint

Having fun looking through ASR data 🧐

DeviceEvents
| where ActionType == "AsrOfficeMacroWin32ApiCallsAudited"
| where InitiatingProcessCommandLine contains 'Downloads'