Anything About IT

Learning, Building, Sharing

How to generate a monthly Defender ATP Threat and Vulnerability Report

Microsoft has updated the Advanced Hunting Schema. Here is how to generate a monthly Defender ATP Threat and Vulnerability report.

Posted by Alex Verboon on Sunday, November 10, 2019

Windows Defender, More than just Antivirus – Part 2

In this second part I cover ASR, Controlled Folder Access, Exploit Guard, and Network Protection in Windows Defender.

Posted by Alex Verboon on Friday, November 1, 2019

Microsoft Defender ATP Advanced Hunting – Who's logging on with local admin rights?

Use KQL Advanced Hunting in Microsoft Defender ATP to find out who is logging on with local administrator rights.

Posted by Alex Verboon on Tuesday, October 29, 2019

Managing Role Based Access (RBAC) for Microsoft Defender Advanced Threat Protection

How to manage Role Based Access Control (RBAC) for Microsoft Defender Advanced Threat Protection.

Posted by Alex Verboon on Friday, May 24, 2019

How to Configure Splunk to pull Windows Defender ATP alerts

Windows Defender ATP provides SIEM integration, allowing you to pull alerts from Windows Defender ATP Security Center into Splunk.

Posted by Alex Verboon on Thursday, March 28, 2019