Anything About IT

Learning, Building, Sharing

Testing Windows Defender MAPS Connectivity with PowerShell

Whenever I work with customers on Windows Defender, one of the first things I review is the MAPS (Microsoft Active Protection Service) connectivity.

Posted by Alex Verboon on Monday, July 8, 2019

The case of Running the Device and Credential Guard Hardware Readiness Tool and unknown architecture

My findings about running the Windows Device and Credential Guard Hardware Readiness Tool and the unknown architecture error.

Posted by Alex Verboon on Friday, May 31, 2019

Managing Role Based Access (RBAC) for Microsoft Defender Advanced Threat Protection

How to manage Role Based Access Control (RBAC) for Microsoft Defender Advanced Threat Protection.

Posted by Alex Verboon on Friday, May 24, 2019

Exploring Microsoft Cloud App Security with PowerShell – Part1

Last Friday I presented at the Configuration Manager Community Event in Bern. Here is how to explore Microsoft Cloud App Security with PowerShell.

Posted by Alex Verboon on Sunday, May 5, 2019

Retrieving Windows Defender Exploit Guard Windows Event logs with PowerShell

Most Windows Defender Exploit Guard features can be enabled in audit or block mode. The impact can be analyzed by looking at Windows Event logs.

Posted by Alex Verboon on Thursday, May 2, 2019

How to Configure Splunk to pull Windows Defender ATP alerts

Windows Defender ATP provides SIEM integration, allowing you to pull alerts from Windows Defender ATP Security Center into Splunk.

Posted by Alex Verboon on Thursday, March 28, 2019