Anything About IT

Learning, Building, Sharing

Setting up Kali in Windows 10 WSL 2.0

Since Microsoft introduced WSL (Windows Subsystem for Linux), many security professionals have started using Kali Linux on Windows.

Posted by Alex Verboon on Friday, December 27, 2019

Microsoft Defender Advanced Threat Protection – Respond Actions Events

Response Actions Events in Microsoft Defender Advanced Threat Protection and how to work with them.

Posted by Alex Verboon on Tuesday, December 10, 2019

How to identify orphan Group Policy content within the Sysvol folder

Today I was working on a Microsoft Security Configuration baseline implementation and browsing through the Sysvol folder for orphan GPO content.

Posted by Alex Verboon on Tuesday, November 19, 2019

How to generate a monthly Defender ATP Threat and Vulnerability Report

Microsoft has updated the Advanced Hunting Schema. Here is how to generate a monthly Defender ATP Threat and Vulnerability report.

Posted by Alex Verboon on Sunday, November 10, 2019

Windows Defender, More than just Antivirus – Part 2

In this second part I cover ASR, Controlled Folder Access, Exploit Guard, and Network Protection in Windows Defender.

Posted by Alex Verboon on Friday, November 1, 2019

Microsoft Defender ATP Advanced Hunting – Who's logging on with local admin rights?

Use KQL Advanced Hunting in Microsoft Defender ATP to find out who is logging on with local administrator rights.

Posted by Alex Verboon on Tuesday, October 29, 2019