In this episode of Practical Sentinel, Thijs describes the different ingestion methods, how to choose the best method, and advises how to filter the ingested data.
In this week's episode of the Practical 365 podcast, Steve Goodman and Rich Dean are joined by Microsoft's Andy Jaw, a senior security specialist with a fascinating background spanning the military, law enforcement, and now as a cyber security expert.
In this blog, we take a look at the Unified Security Operations Platform, review what is available right now, discuss what Microsoft is building, and ask whether you need this functionality.
Microsoft 365 Archive is a solution to move SharePoint Online sites from hot to cold (less expensive) storage. It works well, and it comes with an added benefit in that archived sites are inaccessible to Copilot. In other words, you can make sure that Copilot doesn't process old and obsolete material by archiving sites that contain this type of content. Seems like a no-brainer.
Welcome to Practical Sentinel! In the introductory blog of this series, we review how Microsoft positions Sentinel, what capabilities the product includes, and what it does well.
In this blog, Thijs Lecomte reviews Exclusion for Microsoft Security Solutions, why they are important, and how to manage them.
Sometimes tenants need to switch Microsoft 365 licenses for Entra ID user accounts, usually to upgrade functionality. This is easy to do manually for one or two accounts, but it's a boring exercise when you need to process more, especially when each account might have a different set of disabled service plans in the original license. This article explains how to process account licenses with PowerShell.
In this blog, Paul Robichaux reviews how to add additional protection to Microsoft Admin Portal Apps through MFA.