S01E45 - Advanced Hunting in Microsoft Defender ATP with Riley Childs (MSFT) - (I.T)

Published: Jul 7, 2020 by Intune.Training

00:00 - Intro
00:31 - Riley Childs Introduction
https://twitter.com/RowdyChildren
03:42 - Windows Admins Discord
http://aka.ms/winadmins
05:44 - Experiences with Microsoft Detection and Response Team (DART)
09:58 - Demo
22:01 - Cloud Protection
https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus
44:20 - Riley misspoke about VirusTotal - VirusTotal DOES use Cloud Signatures when it scans with Defender, differences in execution by VirusTotal might sometimes result in a different result.
1:26:00 - MDATP Evaluation Lab
https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab
1:27:00 - Licensing and Free Trial
http://aka.ms/mdatp
1:28:28 - Supported Operating Systems
1:31:30 - An update on Web Content Filtering
https://techcommunity.microsoft.com/t5/microsoft-defender-atp/an-update-on-web-content-filtering/ba-p/1505445
1:36:29 - Wrapping up

Share

Latest Posts

S02E30 - What's new in Intune Reporting w/ Spencer Shumway - (I.T)

S02E30 - What's new in Intune Reporting w/ Spencer Shumway - (I.T)

00:00 - Intro
00:30 - Spencer Shumway introduction
https://twitter.com/spencershum
03:25 - Reporting in MEM
06:40 - Reporting the new way
19:36 - Log analytics
31:25 - S02E01 - Easily Create Power BI Reports with the Intune Data Warehouse - (I.T)
https://youtu.be/2ICPKRBIews
31:44 - Paging vs Export
36:54 - Deprecating application inventory in datawarehouse
https://docs.microsoft.com/en-us/mem/intune/fundamentals/in-development#intune-data-warehouse-updates
https://docs.microsoft.com/en-us/mem/intune/fundamentals/in-development#export-underlying-discovered-apps-list-data
41:07 - Available reports/data today
45:52 - Roadmap
47:02 - Useful resources
Initial reporting blog: https://techcommunity.microsoft.com/t5/intune-customer-success/new-reporting-framework-coming-to-intune/ba-p/1009553
2009 Reporting Blog Update: https://techcommunity.microsoft.com/t5/intune-customer-success/microsoft-endpoint-manager-reporting-blog-for-2009-release/ba-p/1685655
2011 Reporting Blog Update: https://techcommunity.microsoft.com/t5/intune-customer-success/introducing-new-policy-reports-amp-more-in-microsoft-endpoint/ba-p/1898027
Getting started with Intune and Log Analytics: https://techcommunity.microsoft.com/t5/device-management-in-microsoft/microsoft-intune-and-azure-log-analytics/ba-p/463145
Intune reporting export API documentation: https://docs.microsoft.com/mem/intune/fundamentals/reports-export-graph-apis
Ignite reporting session 2020: https://techcommunity.microsoft.com/t5/video-hub/microsoft-endpoint-manager-reporting-graph-apis-and-log/m-p/1681560
Intune Automated reporting Github: https://github.com/phmehta94/IntuneAutomatedReporting

Read more

S02E29 - Beginners Guide to Accessing On-Premises Resources with Azure AD Joined Devices - (I.T)

S02E29 - Beginners Guide to Accessing On-Premises Resources with Azure AD Joined Devices - (I.T)

Sorry about Adam’s keyboard noise and yes, this could be a very short video but we felt like there are people who could use a more in-depth discussion.

00:00 - Intro
00:10 - Jóhannes Geir Kristjánsson introduction
01:10 - Access on-premises resources from an Azure AD-joined device
https://docs.microsoft.com/microsoft-365/business/access-resources
02:36 - Windows admins discord
http://aka.ms/winadmins
04:31 - Migration process
06:40 - Blockers
10:24 - Lab environment
15:50 - Install Azure AD Connect
37:57 - Assign licences
52:40 - Enable single sign-on
1:03:38 - Internal websites and certificates
1:09:08 - Wrap up

Read more

S02E28 - First Look at Win32 Application Supersedence in Microsoft Intune - (I.T)

S02E28 - First Look at Win32 Application Supersedence in Microsoft Intune - (I.T)

00:00 - Intro
02:12 - S01E07 - Publishing Win32 Applications using Microsoft Intune
https://youtu.be/x-RMjhzGXxA
02:54 - Win32 Application Supersedence
https://docs.microsoft.com/mem/intune/apps/apps-win32-supersedence
08:54 - Create a Supersedence relationship in Intune
13:13 - Supersedence behavior
https://docs.microsoft.com/mem/intune/apps/apps-win32-supersedence#supersedence-behavior
14:33 - Supersedence limitations
https://docs.microsoft.com/en-us/mem/intune/apps/apps-win32-supersedence#supersedence-limitations
23:19 - Discussion
28:58 - Wrap up

Read more