Anything About IT

Learning, Building, Sharing

Hunting for Local Group Membership changes

Detect changes to the local administrator group using Microsoft Defender ATP advanced hunting.

Posted by Alex Verboon on Sunday, September 6, 2020

Generating Advanced hunting queries with PowerShell

Writing advanced hunting queries for Microsoft Defender ATP to search for execution of specific PowerShell commands.

Posted by Alex Verboon on Friday, July 10, 2020

Defender ATP Advanced hunting with TI from URLhaus

How to use Threat Intelligence (TI) data from URLhaus with Microsoft Defender ATP.

Posted by Alex Verboon on Sunday, June 21, 2020

Managing Time Zone and Date formats in Microsoft Defender Security Center

When you receive security alerts or investigate security events, the aspect of time is an important element.

Posted by Alex Verboon on Tuesday, June 9, 2020

Advance your Microsoft Defender ATP hunting skills using the Atomic execution framework

Advance my hunting skills using MITRE ATT&CK and Microsoft Defender Advanced Threat Protection.

Posted by Alex Verboon on Friday, June 5, 2020

Meet the new Microsoft Defender ATP evaluation lab

Announced public preview of the new Microsoft Defender ATP evaluation lab.

Posted by Alex Verboon on Sunday, May 24, 2020