- Conclusions from reading threat analyst reports
- Ransomware prevention, not defense
- Setup up automated investigation and response
- Avoid PlugX malware
- Disrupting Qakbot
- How to isolate a device using Defender
- Blocking malicious activity – too many email updates
- Error setting up Identities in Defender
- How to Defender
- Prerequisites of settings for Defender
- Blocking Fileless malware
You may also like
Defense implies a reactionary approach. Prevention set the scene where ransomware can’t get you in the first place.
I often get asked how we manage networks without an RMM tool and I always reply that we take full advantage and make use of what Microsoft has to offer. This type of rule is an example of that philosophy.
Many vendors call this Endpoint Detection and Response (EDR) or Extended Detection and Response (XDR). Microsoft calls it Defender for Business.
To resolve this error, you need to remove three security groups from Azure AD. These groups were created by default in your tenant but have since been deprecated by Defender.
5 thoughts on “How to Defender”