If you have a 3rd party mail gateway in front of your Exchange Online tenant and haven’t already fixed the bypass issue, then you’re opening yourself up to inbound emails that completely skip the usual checks performed by Exchange Online Protection. What is the bypass issue? If you use a 3rd party gateway as your… Read More: The EXO 3rd Party gateway bypass is even worse than… »
If you’ve ever had to deploy a new Microsoft Defender for Identity (MDI) Sensor on a Domain Controller, you’ll know that one of the required components is the Access Key that is used during installation. The Access Key is effectively a one-time password for use when deploying the sensor, after which communication is performed using… Read More: MDI Access Key Generation »
Well, this is definitely going to be one of my shortest posts 😁. Q. How do you remove an App Connector in Microsoft Defender for Cloud Apps? A. You can’t. The only options you have are to edit the settings, edit the instance name, or disable the connector. If you no longer need the App… Read More: MDCA App Connector Deletion »
I’ve been doing a bit of work recently with URL/Domain Indicators in “block execution” mode and thought it might be usefult to share my experience here. I found a website that isn’t blocked in Chrome and I suspect that my experience may not be unique. This article briefly covers how to use Indicators to block… Read More: Browser support for Defender for Endpoint URL/Domain Indicators »