Bartosz Wysocki

Defender for Cloud Apps Settings You've Never Touched (But Should)

All right class. You have Defender for Cloud Apps in

Fixing the "Account Created and Deleted in Short Timeframe" Analytic Rule

Alright class. Today it is "Account Created and Deleted

You're Paying for Defender XDR Features You Never Enabled

All right class. You got yourself a good little E5

Is Your SOC Actually Doing Anything? Here Is How to Find Out

All right class. A friend of mine recently took over

PIM Auditing in Microsoft Sentinel: High Value Detections

Alright class. Most lessons in this series are usually autopsies.

Why Abandoned Resources Are a Security Problem, Not Just a Billing One

Everything here is built on the work of Dolev Shor.

Sentinel Incident Email Alerts: Free Logic App with ARM Template

All right class One of the most common questions I&

Advanced Hunting Just Got a Lot More Powerful. You Can Now Act on What You Find.

All right class Hunting was always "find bad things

The Nag Machine: A Logic App That Badgers Your Team About Unowned Sentinel Incidents

All right class Today is a quick one so you

Your Crown Jewels Are in Defender. You Just Never Set Them Up.

All right class. You have been saying "crown jewels&