
Modern Security: Microsoft security, Sentinel, Defender XDR and identity guides
Latest articles





Get notified of new posts
Want to be informed when a new post is published? Subscribe via RSS or follow me on LinkedIn and you'll know right away.
More articles

AI agent runtime protection in Microsoft Defender for Endpoint
How Microsoft Defender for Endpoint's AI agent runtime protection detects and blocks prompt injections before executing (now in preview)

Defender deployment tool: Easy and simple onboarding for Defender for Endpoint
Easy Microsoft Defender for Endpoint onboarding with Defender Deployment Tool: setup, command-line use, and rollout considerations.

Microsoft Defender for Endpoint custom data collection: get the telemetry you need
Learn about how Microsoft Defender for Endpoint Custom Data Collection fixes lack of visibility, and step-by-step instructions to implement it properly.

Identity attack graph in Microsoft Sentinel: easy find lateral movement paths
Map lateral movement paths across Entra and Azure. Step-by-step setup guide for the Microsoft Sentinel identity attack graph.

Getting started with OpenCTI: threat intelligence connected to Microsoft Sentinel
A practical guide to installing OpenCTI, adding threat intelligence feeds and connecting it to Microsoft Sentinel for enriching TI information.

Microsoft Defender for Identity sensor guide (v3.x)
Complete step-by-step guide to deploying and migrating to the Microsoft Defender for Identity (MDI) sensor v3.x and auditing included.

Defender XDR advanced hunting tables: ingest directly into Sentinel data lake
Defender XDR advanced hunting tables now ingest directly into Sentinel data lake. No DCR, no analytics tier costs. Read how in my blogpost.

Manage your live response library directly in Microsoft Defender
Microsoft Defender for Endpoint now includes centralized library management for live response. Learn what it does, how to set it up.

