May 10th, 2023 → 8:47 am @ kamind // No Comments
Microsoft has come out with numerous tools to protect clients that are either in Azure or On Prem, or perhaps even a mixture of both. One such product is called Defender for Endpoint which is further reviewed in this article. What Is The Defender For Endpoint? Think of your traditional antivirus or anti-malware software package, but multiply that by a factor of 100x. That is what Microsoft Defender is all about. It consists of the following components: Endpoint sensors: If you are using Windows 10, then any and all behavioral analytics from your wireless device are transmitted to Defender, which resides in a separate area of Azure. Cloud analytics: Behavioral signals are also captured from your Azure cloud deployment making use of Machine Learning and Big Data analytics. From here, these behavioral signals are then converted over to various bits of data to alert your IT Security team of any […]
December 1st, 2022 → 9:33 pm @ kamind // No Comments
Our last article reviewed how Microsoft Defender can be used for a Cloud based deployment in Azure. In this article, we examine how it can be used for identity purposes, which is very much a hot button topic today. What Is Microsoft Defender? Defender for Identity used to be called Azure Advanced Threat Protection, or Azure ATP. Rather than depending upon other network security tools, it allows you to configure Azure Active Directory to provide the warnings and alerts about any malicious activity that is transpiring in your Cloud environment. In a way, it can be considered as a SIEM, but much more powerful. For example, it contains of the following characteristics: It also supports the DevSecOps team if your organization has one. It makes use of learning-based analytics to monitor and analyze all kinds of network behavior across the lines of communications. It provides for a much greater level […]
December 1st, 2022 → 12:09 am @ kamind // No Comments
With the Cyber landscape changing on a minute-by-minute basis, businesses all over the world need to make sure that their Cloud deployments in Azure are well fortified. In this regard, a new tool from Microsoft called the “Defender For Cloud” has been designed to fit this role, and is further reviewed in this article. What Is It’s Role? At a very minimum the Defender For Cloud addresses three key needs: It continually monitors the lines of defenses that your company has deployed. This is outputted in terms of a numerical report, so that you and your IT Security team can gauge where you are at in a particular point of time. This will help you to make the necessary adjustments and tweaks to mitigate your risks to avoid becoming a victim. This tool also provides key strategies and recommendations as to what you need to do, based upon what it […]
