Defender
Enterprise security solutions, cloud-based, intelligent and automated security responses for Endpoint, Identity, Office 365 and Cloud Apps. A full protection stack.
Defender for Endpoint
Handle threat and vulnerability events on endpoints to prevent malicious and harmful contents.
Secure macOS Intune Deployment with Defender and Global Secure Access
Secure macOS deployment with Intune, Defender for Endpoint and Global Secure Access: configuration steps for a protected Mac in the enterprise.
Niklas Tinner
Defender for Endpoint security settings management summary
Defender for Endpoint security settings management: management options compared, prerequisites, tenant settings, policies and device targeting.
Niklas Tinner
The bridge from Intune to Defender for Endpoint
Connect Microsoft Intune and Defender for Endpoint step by step: enable the integration, onboard devices and use device risk in compliance policies.
Niklas Tinner
Move to Defender for Endpoint: some personal experience
Migrating to Microsoft Defender for Endpoint: prerequisites, replacing a third-party antivirus and key lessons learned from a real project.
Niklas Tinner
Microsoft Defender: a review
Microsoft Defender review: Windows Security app features, Defender for Endpoint capabilities, licensing and a hands-on assessment of each protection area.
Niklas Tinner
Defender for Identity
Monitor on-premises identities and correlate activities with other cloud security products to get a deeper understanding of your environment.
Defender for Identity fundamentals
Microsoft Defender for Identity fundamentals: licensing, implementation considerations, sensor installation and how it strengthens your security posture.
Niklas Tinner
Defender for Office 365
Secure messaging & collaboration, which is the biggest attack surface with native Defender for Office 365 capabilities.
Defender for Office 365 fundamentals
Defender for Office 365 fundamentals: capabilities, threat policies, attack simulation training, Threat Explorer, investigations and reports.
Niklas Tinner
Launching an attack simulation training
Run phishing attack simulation training with Defender for Office 365: payloads, end-user notifications, simulation automations and best practices.
Niklas Tinner
Defender for Cloud Apps
Discover and manage interactions with cloud applications across your tenant.
Defender for Cloud Apps: some concepts and how to get started
Plan and run Microsoft Defender for Cloud Apps: architecture, cloud discovery, app risk scores and a practical process to sanction or block apps.
Niklas Tinner
Overview: Session policies with Conditional Access App Control and Defender for Cloud Apps
Session policies with Conditional Access App Control and Defender for Cloud Apps: components, how sessions are proxied and practical policy samples.
Niklas Tinner
A tour through Defender for Cloud Apps
Guided tour of Microsoft Defender for Cloud Apps: policies, app connectors, cloud app catalog, alerts and a sample SecOps investigation.
Niklas Tinner
Correlation and reporting
Microsoft 365 Cloud Security correlation
How Microsoft 365 security correlates signals across Defender, Entra ID and Intune, with incident examples and Microsoft Graph query samples.
Niklas Tinner
Security Reports in M365
Build scheduled security reports from the Microsoft Defender portal: report types, vulnerability management data and a management report outline.
Niklas Tinner
More on identity, Conditional Access and Global Secure Access:
Microsoft Security
Microsoft cloud security guides: Conditional Access, Entra authentication, PIM, External ID, Global Secure Access, Microsoft 365 security and Azure governance.
Niklas Tinner