Latest blogs

Defender for Cloud

Tutorial: How to enable/disable Defender for Servers Plans at resources level 

Intro I noticed that more and more clients are starting to use mixed license model for Defender for Servers. Previous you could only enable Defender for Server at the subscription level. Microsoft also noticed this and …

March 6, 2024 · 3 min · Thomas Verheyden
Defender for Endpoint

Defender for Endpoint for Linux: new capabilities and enhancements

Intro Microsoft published this summer new capabilities and enhancements for Defender for Endpoint on linux. In my opinion Defender for Endpoint on linux is a lot of times overlooked and the new features are a very good …

August 28, 2023 · 5 min · Thomas Verheyden
Defender for Endpoint

Microsoft Defender for Endpoint security management (MDE Attach v2) on Linux : A deep dive

Intro This blog post is inspired by Rudy Ooms, who wrote a excellent write up about the behind the scenes of the MDE attach v2 process and security configuration on Windows endpoints. Which can be found here. A must read …

August 4, 2023 · 7 min · Thomas Verheyden
Defender for Cloud

Unleash the power of defender plan 2: Just-in-time VM access – part 4

Intro Malicious actors actively search for machines with open management ports, such as RDP or SSH, to exploit. All of your virtual machines are potential targets for these attacks if you have those ports open. Once a VM …

July 20, 2023 · 6 min · Thomas Verheyden

Tool: MDE-Troubleshooter is born !

Background story During my consultancy work, I have received feedback from numerous clients indicating that they consistently encountered difficulties when attempting to troubleshoot issues with Defender for Endpoint on …

June 30, 2023 · 2 min · Thomas Verheyden

Your isolated device stuck in Defender for Endpoint Isolation mode , not anymore !

Intro When you want to investigate a endpoint that has indication of being comprised you might want to put the endpoint in Defender for Endpoint isolation mode. Isolation will disconnected the potential comprised …

June 23, 2023 · 2 min · Thomas Verheyden
Defender for Endpoint

Microsoft Defender for Endpoint settings management: Enhancements

*UPDATE 17/07/2023* Added extra information about system labels Intro Microsoft is doing a very good job at listening to their customers, partners and MVP’s lately. One of the highly requested feature was to simplify the …

June 15, 2023 · 6 min · Thomas Verheyden
Defender for Cloud

Unleash the power of Defender for Servers Plan 2: Agentless scanning – part 3

Intro Welcome to part three of the blog series on Unleach the power of Defender for Servers Plan 2! In our previous blog, we explored how to start implementing Adaptive Application control. In part 3, we’ll dive into the …

June 14, 2023 · 8 min · Thomas Verheyden
Defender for Cloud

Direct on board your non-Azure servers to defender for cloud WITHOUT Azure Arc

Intro Up until now, onboarding non-Azure servers to Defender for Servers required Azure Arc as a mandatory pre-requisite. With this new release, Microsoft is introducing an additional direct onboarding path for non-Azure …

June 5, 2023 · 5 min · Thomas Verheyden
Defender for Cloud

Unleash the power of Defender for Servers Plan 2: Adaptive Application Controls – Part 2

Welcome, this is the second part of the Defender for server P2 advanced protection series I will blog about. If you want to read the other parts they can be found here: Part 0 Part 1 The topic of this blog will be about …

May 17, 2023 · 8 min · Thomas Verheyden