This article reviews using advanced message tracking to identify Junk-Mail and Spoof Messages through tools like Exchange Message Trace, Threat Explorer, Message Header Analyzer, and Advanced Hunting.
Microsoft has broadened and deepened the functionality available through sensitivity labels since their introduction in 2018. This article explains the basics of sensitivity labels and highlights some of the areas where important changes have occurred.
When setting up your SIEM, ingesting logs from Active Directory is essential. This blog dives into the two options for ingesting AD logs and compare their strengths and weaknesses.
If you are stuck using your on-premises resources to manage a cloud infrastructure, it is an opportune time to change that with the availability of tools and functions that are now available. In this article, we focus on how to use PowerShell to manage Microsoft 365. In addition, we consider how to use cloud services to manage PowerShell code, testing, security controls, and more.
Security researchers love to report software vulnerabilities that they find. That's their role and it's a valuable contribution to the technical community. However, some of the reports about Microsoft 365 flaws are over-hyped and under-considered, like a recent example covering the risk of phishing in the Exchange Online Direct Send feature.
Microsoft has released the public preview of RBAC for Applications. The new mechanism allows tenants to control the access Azure AD apps have to mailboxes at a granular level. RBAC for Applications will replace application access policies.
Outlook groups and shared mailboxes both help small teams work with shared email. The decision as to which to use depends on the exact needs the team has. Microsoft has given Outlook groups some useful enhancements recently, but shared mailboxes are still the most email-friendly choice.
This article continues the discussion of the main steps needed to mitigate a zero-day threat Using Microsoft 365 Defender and Sentinel.