#defenderforcloudapps — Public Fediverse posts

Just a heads up - Microsoft Defender for Cloud Apps is incorrectly blocking multiple legitimate domains, certs, and cloud apps. Microsoft's issue ID is DZ1231199 (admin.cloud.microsoft#/serviceheal...). #Microsoft #Defender #Outage #DefenderForCloudApps

admin.cloud.microsoft/#/servicehealt...

Just a heads up - Microsoft Defender for Cloud Apps is incorrectly blocking multiple legitimate domains, certs, and cloud apps. Microsoft's issue ID is DZ1231199 (https://admin.cloud.microsoft/#/servicehealth/:/alerts/DZ1231199).

More discussion on r/sysadmin subreddit here:

https://www.reddit.com/r/sysadmin/comments/1r30bz8/get_it_together_microsoft/

#Microsoft #Defender #Outage #DefenderForCloudApps

How to remove Otter. It might not be a simple as you think.

#MSP #DefenderforCloudApps #OAuth
https://bit.ly/3wKBg8c

Protecting OAuth is important and it's been flying under many admins radar for far too long. Follow this article and you will have now prevented misleadingly named apps, potentially malicious apps, apps with misleading publisher names, apps performing unusual amounts of file downloads, the addition of credentials to OAuth, and apps with a strange ISP for an OAuth.

#M365 #entraID #defenderforcloudapps #MSP #ITSP
https://bit.ly/48tEYQH

How to remove Otter. It might not be a simple as you think.

#MSP #DefenderforCloudApps #OAuth
https://bit.ly/3wKBg8c

Protecting OAuth is important and it's been flying under many admins radar for far too long. Follow this article and you will have now prevented misleadingly named apps, potentially malicious apps, apps with misleading publisher names, apps performing unusual amounts of file downloads, the addition of credentials to OAuth, and apps with a strange ISP for an OAuth.

#M365 #entraID #defenderforcloudapps #MSP #ITSP
https://bit.ly/48tEYQH

How to remove Otter. It might not be a simple as you think.

#MSP #DefenderforCloudApps #OAuth
https://bit.ly/3wKBg8c

Protecting OAuth is important and it's been flying under many admins radar for far too long. Follow this article and you will have now prevented misleadingly named apps, potentially malicious apps, apps with misleading publisher names, apps performing unusual amounts of file downloads, the addition of credentials to OAuth, and apps with a strange ISP for an OAuth.

#M365 #entraID #defenderforcloudapps #MSP #ITSP
https://bit.ly/48tEYQH

How to remove Otter. It might not be a simple as you think.

#MSP #DefenderforCloudApps #OAuth
https://bit.ly/3wKBg8c

Protecting OAuth is important and it's been flying under many admins radar for far too long. Follow this article and you will have now prevented misleadingly named apps, potentially malicious apps, apps with misleading publisher names, apps performing unusual amounts of file downloads, the addition of credentials to OAuth, and apps with a strange ISP for an OAuth.

#M365 #entraID #defenderforcloudapps #MSP #ITSP
https://bit.ly/48tEYQH

Automatically disrupt adversary-in-the-middle (AiTM) attacks with Microsoft XDR

Microsoft announced expansion of automatic attack disruption to include adversary-in-the-middle attacks (AiTM) attacks, in an addition to the previously announced public preview for business email compromise (BEC) and human-operated ransomware attacks.

https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/automatically-disrupt-adversary-in-the-middle-aitm-attacks-with/ba-p/3821751

#microsoft #email #business #AiTM #bec #xdr #azure #soc #securityplatform #defender #defenderforidentity #defenderforcloudapps #defenderforendpoint #microsoft365defender #cloudsecurity #securityanalytst

Also be sure to turn on these monitoring policies in #DefenderForCloudApps so you can #CatchTheHacker before they get too deep, whether you switch to #Kerberos or not. #NetworkSegregation is also a great #LayeredDefense method to ensure if one system is compromised the attacker can't use #SMBtraversal to get to all your computers, globally. #EternalBlue source code is still being used to get to #DCs via #Trikbot evolutions, after #Phishing a user with #LocalAdmin privileges, to execute #mimikatz against #ActiveDirectory to steal all the objects. #YesThisHappened

We are happy to announce that applications that use ports other than 443 can now be protected in real-time using Defender for Cloud Apps #DefenderForCloudApps #RealTimeControls #sharegeneratedinpartwithgpt3 https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/protecting-apps-that-use-non-standard-ports-with-defender-for/ba-p/3685351