by The Collective | Feb 3, 2021 | Blog
Many organizations that work with Azure Sentinel find that the built-in ‘ticketing’ capabilities are rather lightweight. More often than not, they are already using an existing ITSM tool and want to use this tool to manage their Azure Sentinel incidents.Within The...
by The Collective | Jan 12, 2021 | Blog
In many regards, 2020 was a perilous year. In the wake of a global pandemic, the entire world had to change the way they live and work. This paradigm change not only presented a difficulty for people personally, also from an IT perspective – and more specifically...
by The Collective | Jul 8, 2020 | Blog
Tags in Microsoft Defender ATP is an extremely powerful tool to identify certain high value machines, group devices into machine groups, or for reporting through the API/PowerBI. Tags in Microsoft Defender ATP is an extremely powerful tool to identify certain high...
by The Collective | Sep 24, 2019 | Blog
Great news! Earlier today, Microsoft announced the General Availability (GA) of Azure Sentinel which has been in public preview since earlier this year. Azure Sentinel is Microsoft’s initial attempt at building a cloud-SIEM and, through it, they enter...
by The Collective | Aug 3, 2019 | Blog
Recently, I was asked whether a ransomware attack on Exchange Online is a real risk and, what an organization could do to protect itself against or recover from such an attack. Before we dive into the specifics, it’s worth adding some more context. Although I’m...
