Tag: MEMCM

How to remediate Defender for Endpoint onboarding with ConfigMgr

Posted on3 Comments

During the past 5 years I have onboarded a couple of thousand devices into Microsoft Defender for Endpoint and can say that, provided that you done your homework with regards to network connectivity, onboarding devices into Defender for Endpoint usually Read More …

Deploying Defender ASR – Block persistence through WMI event subscription

Posted on2 Comments

Last week Microsoft released the DRAFT Security baseline for Windows 10 and Windows Server, version 20H2. Although available since Windows 10 1903, the attack surface reduction rule ‘Block persistence through WMI event subscription’ is now being included into the recommended Read More …