by The Collective | Jul 8, 2020 | Blog
Tags in Microsoft Defender ATP is an extremely powerful tool to identify certain high value machines, group devices into machine groups, or for reporting through the API/PowerBI. Tags in Microsoft Defender ATP is an extremely powerful tool to identify certain high...
by The Collective | Sep 24, 2019 | Blog
Great news! Earlier today, Microsoft announced the General Availability (GA) of Azure Sentinel which has been in public preview since earlier this year. Azure Sentinel is Microsoft’s initial attempt at building a cloud-SIEM and, through it, they enter...
by The Collective | Aug 3, 2019 | Blog
Recently, I was asked whether a ransomware attack on Exchange Online is a real risk and, what an organization could do to protect itself against or recover from such an attack. Before we dive into the specifics, it’s worth adding some more context. Although I’m...