MDE-Troubleshooter v1.6.1 available

ByThomas Verheyden

What’s new:
– Inspired by Yong Rhee “Resolving High CPU Utilization in MDE” session, added additional options to run the Performance analyzer, Overview is now by default.
– Added ASR rules that went GA
– Added a check if DeviceControl is enabled
– Added Proxy ULR/PAC check
– Added check to see if signature update are out of date

Download:
GitHub – ThomasVrhydn/MDE-troubleshooter: This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized view of the security configuration, log files, updates, and provides access to the Performance Analyzer.

As always , new ideas are always welcome !

Similar Posts

The ultimate Defender XDR RBAC visualization

ByThomas Verheyden

Do you also struggle, like I do, to assign the correct permissions in Microsoft Defender XDR RBAC when designing your RBAC model? I recently created a visual overview of the current roles and their functions. It helped me a lot in understanding how to structure RBAC properly and I hope it can help you too!…

Unleash the power of Defender for Servers Plan 2: The Intro – Part 0

ByThomas Verheyden

Introduction I decided to start a blog series about the Advanced protection features which are included in the Defender for Servers Plan 2 provided by Microsoft Defender for Cloud. More and more companies are starting to use Defender for Servers but are uncertain which plan to choose for. With this blog series I would like…

|

Tutorial: How to enable/disable Defender for Servers Plans at resources level 

ByThomas Verheyden

Intro I noticed that more and more clients are starting to use mixed license model for Defender for Servers. Previous you could only enable Defender for Server at the subscription level. Microsoft also noticed this and they made an option available to enable Defender for Servers at the resource level ! The ability to enable…

Microsoft Defender for Endpoint settings management: Enhancements

ByThomas Verheyden

*UPDATE 17/07/2023* Added extra information about system labels Intro Microsoft is doing a very good job at listening to their customers, partners and MVP’s lately. One of the highly requested feature was to simplify the requirements for their MDE settings management (AKA ‘MDE Attach’) . But that’s not all, more exciting news will be announced…

How to work around the Azure Security Agent extension not deploying by default on the latest VM windows images, a currently know limitation…

ByThomas Verheyden

Intro This blog will be about an issue I bumped into when deploying one of the enhanced protection features in defender for cloud. The enhanced feature, adaptive application control, requires the deployment of the Azure Monitor Agent. The Azure Monitoring Agent also installs additional extensions. One of those additional extensions is the Azure Security Agent…

Leave a Reply