Tag feed

#defender-for-endpoint

12 posts5 followers

Explore Hashnode

Alternatives

Trending tags this week

EAEmad Adelblog.emadadel.comOct 12, 2025 · 2 min read

🇦🇪 Host Microsoft Defender Data Locally in the UAE

🧭 Overview Microsoft now allows organizations to store Microsoft Defender data locally within the United Arab Emirates (UAE) — supporting compliance, privacy, and data sovereignty requirements. ☁️ What’s Included 🛡️ Service 📍 Local Data Residency ...

0

SShakcyber365.hashnode.devAug 9, 2025 · 3 min read

When the Kill Chain Targets the EDR

EDR isn’t just a defensive tool, it’s a prime target. Across recent incidents, attackers have shifted from evasion to direct EDR disruption. In 2024, approximately 25% of ransomware attacks incorporated “Bring Your Own Vulnerable Driver” (BYOVD) tech...

0

SMShivam Mathurcybershiv.hashnode.devJul 3, 2025 · 13 min read

Navigating Real-World Obstacles in Microsoft Defender Custom Baseline Security Deployment

“Custom security baselines aren’t failing because they’re flawed — they’re failing because your infrastructure is stuck in 2012.” In my previous blog, we discussed how to build a custom security baseline using Microsoft Defender for Endpoint (MDE). ...

0

MNMohammed Nadeemazuremicrosoftdefender.hashnode.devApr 22, 2025 · 8 min read

Microsoft Azure Defender for Cloud

Defender for Cloud Overview Microsoft Defender for Cloud is a cloud-native application protection platform (CNAPP) that is made up of security measures and practices that are designed to protect cloud-based applications from various cyber threats and...

0

BBBrian Baldockblog.brianbaldock.netMar 10, 2025 · 3 min read

Disconnected Environments Revisited

Back in 2023, I wrote about deploying Microsoft Defender for Endpoint (MDE) (Link) in disconnected environments, covering why proxies were necessary and how to make them work. Fast forward to 2025, and the core message hasn't changed: Defender for En...

0

BBBrian Baldockblog.brianbaldock.netFeb 14, 2025 · 5 min read

Defender for Endpoint & "The Internet"

"Defender for Endpoint only works when you're connected to the internet." If I had a dollar for every time I heard that, I'd be set for life. This statement makes security pros wince because it fundamentally misunderstands how modern cloud security o...

0

OSOndrej Sebeladoitpshway.comOct 2, 2024 · 7 min read

Automated Software Vulnerability Notification

Today, I’ll guide you through setting up an automation system that notifies your users about vulnerable software detected on their devices. This information will be sourced from the Microsoft Defender API. In this post, I’ll demonstrate how to create...

1

P

JDJonathan DeLeonmrcyberleon.hashnode.devAug 24, 2024 · 4 min read

SOAR + EDR Project using Lima Charlie / Tines

Objective: Utilizing SOAR automation for Endpoint Detection & Response (EDR) to enhance workflow efficiency and automate the isolation of a device across multiple communication channels. Tools Used: In this project, I employed a range of sophisticate...

0

JDJonathan DeLeonmrcyberleon.hashnode.devAug 24, 2024 · 3 min read

Utilize Custom Analytics with Query in Microsoft Sentinel to monitor for malicious login activities.

Objective: Utilize SIEM technology to consolidate logs (Windows Events) for ingestion into the SIEM and formulate a custom analytics query to run/detect potential malicious activity, thereby monitoring for possible Brute Force Login attempts. Tools: ...

0

OSOndrej Sebeladoitpshway.comJun 12, 2024 · 3 min read

Manage Microsoft 365 Defender (XDR) via PowerShell

In case you are using Microsoft Defender you are familiar with the security.microsoft.com portal. You also probably know that Microsoft also offers API for this security solution. Today I will show you some of my PowerShell commands (M365DefenderStuf...

0

#defender-for-endpoint

Search Hashnode

#defender-for-endpoint

Explore Hashnode

Trending tags this week

🇦🇪 Host Microsoft Defender Data Locally in the UAE

When the Kill Chain Targets the EDR

Navigating Real-World Obstacles in Microsoft Defender Custom Baseline Security Deployment

Microsoft Azure Defender for Cloud

Disconnected Environments Revisited

Defender for Endpoint & "The Internet"

Automated Software Vulnerability Notification

SOAR + EDR Project using Lima Charlie / Tines

Utilize Custom Analytics with Query in Microsoft Sentinel to monitor for malicious login activities.

Manage Microsoft 365 Defender (XDR) via PowerShell