Dutd

 This is the post to collect some Notes from a lab practice. Management Endpoint Security Stack:  Antivirus Disk Encryption Firewall Endpoint Detection & Response Attack Surface Reduction Device Control Web Protection Network Protection Management Architecture Microsoft Endpoint Manager (MDM) = Microsoft Intune admin Center Antivirus Disk Encryption Firewall Endpoint  Detection and Response Endpoint Privilege Management Account … Read more

Endpoint Detection & Response 1 Proactive hunting Not all threat scenarios begin with an alert Proactive and iterative search for threats The power of knowing the network 2 Enrich existing information Understand the impact of existing alerts Get more information on entities and IOCs 3 Datasets Emails (Defender for Office) Email transactions, including post-delivery Emails attachments and URLs … Read more