What is Defender Anti-Virus Troubleshooting mode?
The real purpose of Troubleshooting Mode, then is for you to document changes that you need to make to the organizational policy for Defender for the affect machines.
Microsoft 365
67 posts
Don’t change the threat actions in anti-virus policy
Students in the Defender XDR course were advised not to alter threat actions in their anti-virus policy, leaving them as Not configured. This allows Defender to use its default behaviors, local device settings, signature-defined actions, and automatic remediation. Relying on Microsoft's security expertise ensures optimal threat management.
Understanding Standard and Strict Preset policies in Defender for Office
Defender for Office has a new way of making it easy for you to deploy policies. Instead of […]
Receive an alert when a message is released from quarantine
Even though quarantine management has been assigned outside of IT you should still monitor when an email has been released from quarantine because phishing is the #1 method that criminals use to gain a foothold in your network.
Assign email quarantine management responsibility
It is determined that a user outside of normal IT operations should be given the ability to manage the email quarantine for the company.
Blocking and monitoring generative AI in your network
Oh, my AI, what can be done? There’s lot of FUD (fear, uncertainty, and doubt) being spewed from […]
Where do you reset MFA for a user?
This is as much for me as it is for you, because I’m constantly forgetting where this is […]
Uninstall Fireflies.ai
The problem with OAuth apps is that they don't ever fully uninstall themselves. The permissions are left there forever, even after you close the account, just waiting for a hacker to figure out how to exploit. In this blog I'll show you what permissions are granted and how to remove them for M365 and Google users.
Copilot Prep: Finding overshared data
Much of your data is probably overshared and under managed. Why would this be important for AI and Copilot?
Announcing our Microsoft 365 Newsletter
This newsletter is a curated blog roll of the 8 most important topics published by Microsoft in the previous week.
The invasive Otter
In today's meeting, a person I met with was sent a meeting recap from "me". Otter had joined a meeting that I was invited to and then emailed them that person a recap of our meeting. I was very disturbed by this event
How to secure your network from OAuth permissions
You will have now prevented misleadingly named apps, potentially malicious apps, apps with misleading publisher names, apps performing unusual amounts of file downloads, the addition of credentials to OAuth, and apps with a strange ISP for an OAuth.