Defender XDR

Proactive Exposure hunting: OAuth Applications and Azure permissions

Intro Microsoft recently announced that OAuth applications are now integrated into the attack path experience within Exposure Management. This also means that all the data available in the Attack surface map is also …

March 25, 2025 · 3 min · Thomas Verheyden
Microsoft Exposure Management

Unleash the power of Enterprise Exposure Graph: Create a Managed Identities Permissions Overview

Intro Lately, I’ve been exploring Microsoft Exposure Management, particularly the data available in the Enterprise Exposure Graph. One interesting use case I’ve identified is leveraging this data to quickly gain an …

February 19, 2025 · 5 min · Thomas Verheyden
Defender for Cloud

After 2 years a new release of MDE-Troubleshooter!

Lately, I’ve been doing a lot of Defender for Endpoint deployment/configuration troubleshooting, which prompted me to dust off my MDE-Troubleshooter. I noticed it was missing some new and improved configurations, so I …

January 7, 2025 · 1 min · Thomas Verheyden
Defender for Cloud

New eBook, “Demystifying Microsoft Defender for Servers” by James Agombar

I’m thrilled to share the launch of the new eBook, “Demystifying Microsoft Defender for Servers” by James Agombar 🎉 I had the pleasure of being a technical reviewer for this eBook, and I can confidently say it’s a …

January 3, 2025 · 1 min · Thomas Verheyden