The MSP License Ladder #4: The Exposure Gap
Base SKUs prevent threats but cannot measure exposure. MDO P2 adds post-delivery investigation across email and Teams. Defender for Cloud Apps reve...
Read Article →Microsoft Defender for Cloud Security Posts
Discover the latest insights, best practices, and security research related to Microsoft Defender for Cloud (formerly Azure Security Center).
Search Defender for Cloud Posts
Filter Posts
Posts
Granular Access to GenAI Apps with Defender for Cloud Apps
Microsoft Defender for Cloud Apps can Add an action to a Discovered app to allow [Sanction] or block [Unsanction] access to discovered generative A...
Read Article →Monitoring Azure Access Elevation in Entra ID
Learn how to detect when a Global Admin silently elevates their access across all Azure subscriptions using Entra ID, Log Analytics, Azure Monitor,...
Read Article →Prevent ShadowAI with Defender for Cloud Apps
With the evolution of AI, especially Generative AI [or GenAI], CISO get or have a lot of questions on how to deal with the safety and compliance of...
Read Article →Defender for Cloud Apps: Do You Know What SaaS Apps Are Being Used in the Organization?
Defender for Cloud Apps aims to tackle the security problems that come with the increasing use of SaaS applications in an organization. Users can q...
Read Article →Defender for Cloud Apps: Do you know what SaaS apps are being used in the organization?
What is Defender for Cloud Apps? Defender for Cloud Apps aims to tackle the security problems that come with the increasing use of SaaS application...
Read Article →Defender for Cloud Apps: Do you know what SaaS apps are being used in the organization?
What is Defender for Cloud Apps. Defender for Cloud Apps aims to tackle the security problems that come with the increasing use of SaaS application...
Read Article →Defender for Cloud: AI Posture Management & AI Workload Protection
Artificial intelligence (AI) tools and Large Language Models (LLM) behind those tools have become a talking point and for some, the new Google sear...
Read Article →Defender for Cloud: AI Posture Management & AI Workload Protection
Artificial intelligence (AI) tools and Large Language Models (LLM) behind those tools have become a talking point and for some, the new Google sear...
Read Article →Defender for Cloud: AI Posture Management & AI Workload Protection
Artificial intelligence (AI) tools and Large Language Models (LLM) behind those tools have become a talking point and for some, the new Google sear...
Read Article →AI workload threat protection in Microsoft Defender for Cloud
Recently, Microsoft announced a new protection plan for AI workloads as part of the Microsoft Defender for Cloud suite. AI security is becoming mor...
Read Article →Microsoft Defender for Cloud Apps – Permissions filter and export capability is here!
Last Updated on January 16, 2025 by Michael Morten Sonne Introduction Microsoft Defender for Cloud Apps (MDA) has… The post Microsoft Defende...
Read Article →Microsoft Defender for Cloud Apps – Visibility into applications with highly privileged permissions, whether used or unused
Last Updated on December 19, 2024 by Michael Morten Sonne Intoduction The principle of Zero Trust emphasizes that… The post Microsoft Defende...
Read Article →Data Protection Made a Breeze: MDA integration in Edge for Business
Microsoft Defender for Cloud Apps is one of the many puzzle pieces of the Microsoft XDR solution that helps you to secure your corporate environmen...
Read Article →Defender for Cloud – Reset to free tier via PowerShell
Last Updated on May 2, 2024 by Michael Morten Sonne Intoduction Resetting Microsoft Defender for Cloud Configuration Are… The post Defender f...
Read Article →Microsoft Defender for Cloud Apps - Common Microsoft 365 Security Mistakes Series
Defender for Cloud Apps (MDA) is such a hidden gem. When talking with Microsoft 365 E5 customers, it’s amazing how few of them really grab MD...
Read Article →Defender for Cloud – Permissions Management – New Features added to Cloud Infrastructure Entitlement Management (CIEM)
Last Updated on April 27, 2024 by Michael Morten Sonne Intoduction In the ever-evolving landscape of cloud-based infrastructures,… The post D...
Read Article →Block apps (discovered/ shadow IT) with Defender for Cloud Apps and Defender for Endpoint
With the use of Defender for Cloud Apps in combination with Defender for Endpoint it is possible to block unsanctioned apps, the block of apps is p...
Read Article →Step-up authentication with Defender for Cloud Apps and Authentication Context
Check out this article via web browser: Step-up authentication with Defender for Cloud Apps and Authentication Context In this post, I will show yo...
Read Article →Direct on board your non-Azure servers to defender for cloud WITHOUT Azure Arc
Intro Up until now, onboarding non-Azure servers to Defender for Servers required Azure Arc as a mandatory pre-requisite. With this new release, Mi...
Read Article →How to work around the Azure Security Agent extension not deploying by default on the latest VM windows images, a currently know limitation…
Intro This blog will be about an issue I bumped into when deploying one of the enhanced protection features in defender for cloud. The enhanced fea...
Read Article →Unleash the power of Defender for Servers Plan 2: The Intro – Part 0
Introduction I decided to start a blog series about the Advanced protection features which are included in the Defender for Servers Plan 2 provided...
Read Article →Microsoft Defender for Cloud– The ultimate blog series (Intro) – P0
Microsoft Defender for Cloud is a cloud-native application protection platform (CNAPP). Defender for Cloud contains a large set of features and cap...
Read Article →Automate Reporting of Defender for Cloud recommendations & Role Assignments with 35 different views
Background Recently, I was asked to build a simple reporting-script, which integrates data from Microsoft Defender for Cloud and Azure ... Read more
Read Article →Block the automated onboarding of Defender for Endpoint without disabling the integration in Defender for Cloud:
You can find my previous blog posts on my medium site. Block the automated onboarding of mde without disabling the mde integration: https://medium....
Read Article →How to migrate from Qualys and enable Microsoft Defender Vulnerability Management (MdeTvm) in Microsoft Defender for Cloud?
Microsoft’s Defender Vulnerability Management is a built-in module in Microsoft Defender for Endpoint that can: If you’ve enabled ...
Read Article →Configure File Integrity Monitoring (FIM) using Defender for Cloud and AMA-agent
File Integrity Monitoring (FIM) is a technology that monitors and detects file changes that could be indicative of a cyberattack. File Integri...
Read Article →Microsoft Defender for Endpoint series – Onboard using Azure Arc or Direct onboarding – Part3C
It is time for part 3C of the ultimate Microsoft Defender for Endpoint (MDE) series. After Part 3B (Onboard Defender for Endpoint using Defender fo...
Read Article →Microsoft Defender for Endpoint series – Onboard using Defender for Cloud – Part3B
It is time for part 3B of the ultimate Microsoft Defender for Endpoint (MDE) series. After Part 3A (Onboard Defender for Endpoint using Microsoft I...
Read Article →Use the Azure Monitor Agent (AMA) for Defender for Cloud and migrate from MMA agent
Defender for Cloud was since the release based on the Microsoft Monitoring Agent (MMA). Since august 2022 it is possible to auto-deploy the Azure M...
Read Article →How to upgrade from MMA-based Defender for Endpoint to MDE unified solution in Defender for Cloud?
The new Defender for Endpoint unified agent is generally available for some time (since April 11th, 2022. The new unified Microsoft Defender for En...
Read Article →Onboard Microsoft Defender for Endpoint using Azure Arc for non-Azure devices
Microsoft Defender for Endpoint deployment is possible based on multiple deployment mechanisms. Microsoft Defender for Cloud (previous Azure Defend...
Read Article →Security Hygiene, Azure Security Center, and Secure Score
The basics Let’s start this article with some basic cybersecurity terminology. Security hygiene, or cyber hygiene, is a general term used to ...
Read Article →Monitor RDP Brute Force Attack with Azure Sentinel & Azure Security Center
Since the last years, there is a large increase in cybercriminals attempting to run attacks by exploiting the login credentials. With the current w...
Read Article →Use Azure Security Center workbooks for detailed information/ dashboards
Azure Security Center included integration with Azure Workbooks. With the new Workbooks feature is it possible to build custom reports. From Azure ...
Read Article →