Category: Security & Protection

Active Directory Security Best Practices: Key NSA Guidelines

Most global businesses run hybrid AD environments, and following active directory security best practices is critical when combining on-premises and cloud services to secure both Active Directory (AD) and Microsoft Entra ID (formerly Azure AD). Both systems manage identity and access control, making them prime targets for attackers aiming to

Read More »

The #1 Way to Prevent Insider Threats

Protecting Your Critical Assets with Insider Threat Prevention Data Breaches Happen Data security is nothing new. Where there is sensitive information, there are those who seek to access, steal, and misuse it, mostly for financial gain. The unfortunate truth about malicious activities is that a third of all data breaches

Read More »

Security Budgets During COVID-19 – A New Infographic

When lockdown protocols kicked in due to COVID-19’s rapid spread all around the world, teams across many industries migrated to a work-from-home normal. However, with remote work comes new security risks—like employees accessing sensitive company assets through personal devices and home wifi. How have security budgets changed as a result

Read More »

Azure Sentinel Solution to Find Vulnerable Netlogon Clients

  Microsoft is addressing a privilege vulnerability in a two-part rollout by modifying how Netlogon handles the usage of Netlogon secure channels.   Phase one, deployment, began on Aug 11. In this phase, secure Remote ProtoCol (RPC) is enforced for machine, trust and domain controller accounts. This phase also includes a new group

Read More »

AMSI and Machine Learning Help to Stop Active Directory Attacks and Other Post-exploitation Behavior

  Last week, Microsoft Defender ATP Research team blogged about Antimalware Scan Interface (AMSI)-driven behavior-based machine learning protections. AMSI helps security software detect malicious scripts by revealing script content and behavior. AMSI integrates with scripting engines on Windows 10 as well as Office 365 VBA to provide insights into the execution of PowerShell, WMI, VBScript,

Read More »

Bridging the Office 365 Insider Threat Security Gap

While Microsoft Office 365 maintains robust  security features, it may not offer the granularity that many enterprises need. When Microsoft Office 365 isn’t maintained and configured properly, it can put  security and compliance requirements in doubt. Here’s what you need to know about the  security features  included in  Office 365

Read More »