Defender – Set-AzWebApp -name "Anything Microsoft and other stuff on the side"

Section 6 – Implement DLP – Implement and monitor Endpoint DLP

Posted by Harri Jaakkonen Posted on 19/11/2023 0 Comments

Posted in Azure, Compliance, Defender, Intune, SC-400, Security, Study guide

Configure advanced DLP rules for devices in DLP policies Supported virtualization You can include virtual machines as monitored devices in the Microsoft Purview compliance portal, and the onboarding procedures remain the same as those listed above. Onboarding Endpoint Data Loss…

Section 5 – Implement DLP – Create and configure DLP policies

Posted by Harri Jaakkonen Posted on 29/10/2023 0 Comments

Posted in Azure, Compliance, Data Loss Prevention, Defender, Entra ID, Microsoft Purview, SC-400, Security, Study guide

Design DLP policies based on an organization’s requirements Designing Data Loss Prevention could be based on the regulations of your industry or just internal security principles that should be made to carve the security measure framework in to stone. In…

Section 13 – Mitigate threats using Microsoft Sentinel – Configure Security Orchestration, Automation, and Response (SOAR)

Posted by Harri Jaakkonen Posted on 11/06/2023 0 Comments

Posted in Azure, Defender, Identity, Microsoft Sentinel, SC-200, Security, Study guide

13th section starting and this time were are learning on automation, alerts and remediation. Configure automation rules By centrally managing automation rules for event management, users may streamline complicated incident orchestration procedures. Automation rules are triggered by the creation of…

Section 10 – Mitigate threats using Microsoft Sentinel – Plan and implement the use of data connectors for ingestion of data sources

Posted by Harri Jaakkonen Posted on 07/05/2023 0 Comments

Posted in Azure, Azure ARC, Azure Policy, Defender, Identity, Microsoft Sentinel, SC-200, Security, Study guide

And in this 10th section on my SC-200 study guide we will go through the following topics. Identify data sources to be ingested for Microsoft Sentinel On August 31, 2024, the Log Analytics agent is deprecated. You should begin preparing…

Section 9 – Mitigate threats using Microsoft Sentinel – Design and configure a Microsoft Sentinel workspace

Posted by Harri Jaakkonen Posted on 30/04/2023 0 Comments

Posted in Azure, Defender, SC-200, Security, Study guide

We are already at the 9th section on my study guide and this time we will start with Sentinel. First I want to point the Ninja training that Ofer Shezaf’s and him team has made for you. It was updated…

Section 8.2 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud

Posted by Harri Jaakkonen Posted on 23/04/2023 0 Comments

Posted in Azure, Defender, Identity, SC-200, Security, Study guide

And this is the second part of 8th section on my study guide and today we are looking at recommendations and the alerts and incidents it will create. Again by apologies to all that had to wait as I cut…

Section 8.1 – Mitigate threats using Microsoft Defender for Cloud – Configure and respond to alerts and incidents in Microsoft Defender for Cloud

Posted by Harri Jaakkonen Posted on 16/04/2023 0 Comments

Posted in Azure, Defender, SC-200, Security, Study guide

Already in the 8th section on my study guide and today we are looking alerts, automation workflows and remediations. And because this is an huge section to cover, I will cut it in two different posts, my apologies for the…

Section 7 – Mitigate threats using Microsoft Defender for Cloud – Plan and implement the use of data connectors for ingestion of data sources in Microsoft Defender for Cloud

Posted by Harri Jaakkonen Posted on 09/04/2023 0 Comments

Posted in Azure, Azure ARC, Azure Automation, Defender, Identity, Microsoft Graph, On-premises, SC-200, Security, Study guide

Continuing the journey with Defender for cloud. This time we will see Data source, how to onboard Azure resources and Azure ARC integration. With the exponential rise of cloud services, companies now place a high priority on protecting cloud workloads….

Azure (AD) recommendations with some explanations

Posted by Harri Jaakkonen Posted on 08/04/2023 0 Comments

Posted in Azure, Azure AD, Azure Policies, Defender, Identity, Identity Platform, Microsoft Graph, Security

This post is on recommendations, so here is my personal red alert type recommendation for all. You still have 83 days, give or take to establish a migration from ADAL to MSAL. Read from more Learn In the past months…

Azure Arc with Defender for cloud

Posted by Harri Jaakkonen Posted on 07/04/2023 0 Comments

Posted in Azure, Azure ARC, Defender, Hybrid, On-premises, Security

Deploying external server to Defender for Cloud Deploying those servers can be done with the following methods: And this is the reason we are talking about Arc as an onboarding tools. See more here But as many use Azure for…

Category: Defender