SOC

Defender for Cloud Apps Settings You've Never Touched (But Should)

All right class. You have Defender for Cloud Apps in

You're Paying for Defender XDR Features You Never Enabled

All right class. You got yourself a good little E5

Is Your SOC Actually Doing Anything? Here Is How to Find Out

All right class. A friend of mine recently took over

Evaluating and Onboarding a Microsoft MSSP (Without the Chaos)

All right class If you read lesson one, you already

Detection Engineering and Why It's a Must Have

Why Your SIEM Won't Save You Without It

Defender for Identity: What's The Point? (And Is It Actually Worth Your Time)

All right class. You have Active Directory. You have domain

Microsoft Sentinel on a Shoestring: What You Can Actually Do with Business Premium

All right class You have Entra ID P1 and Business

KQL User Audit Playbook V2: The Insider Threat Investigation Guide

All right class. This is a continuation of my previous

Teams Threat Protection: What Actually Changed and What You Can Actually Hunt

All right class Your SOC has limited visibility into Teams.

Threat Analytics in Microsoft Defender: What It Actually Does and Why Your SOC Needs It

All right class. You're doing your SOC investigations