Azure User Group Nepal

Within Microsoft Defender for Cloud (MDC), security recommendations play a crucial role in enhancing your cloud security posture. Currently, MDC has score-based recommendations and a new risk-based recommendation is coming that is in preview. In this post, we discuss why Microsoft is switching to the risk-based recommendation. First, let’s

Microsoft has decided to retire the Log Analytics Agent in August 2024. Log Analytics agent is used to collect logs and performance data from Azure Virtual Machine or any machine onboarded to Azure using Azure Arc. Currently, the Log Analytics Agent collects the logs and sends them to the Log

The device onboarded to Defender for Endpoint (MDE) needs a security policy applied to manage Defender security settings. Once the device receives the policy, the Defender for Endpoint components on the device enforces the policy and reports the device's status. There are many ways to apply policy: 1. Using Intune

Defender for Endpoint detects threats using its own advanced threat intelligence system based on artificial intelligence, machine learning, and behavioral analytics. Based on that intelligence database MDE generates alerts/incidents in case of suspicious activities, or attacks. We can also generate alerts/incidents based on our own intelligence in MDE.

Currently, Defender Cloud Security Posture Management (CSPM) is in public preview. What is CSPM Cloud security posture management(CSPM)is the process of continuously monitoring and assessing the security posture of cloud resources that detects/identify vulnerability, misconfiguration, and other security threats and issues. It also provides possible remediation to

For the Intune-managed device, we deploy the policy from Intune but what if we have a device that is not Intune-managed and also not domain-joined then how to push security policies centrally?  The answer is to use Defender for Endpoint's new feature 'Security Settings Management'. Below is the official word

Microsoft Defender for Endpoint has its own intelligence database and based on that it triggers alerts. If we want to trigger alerts based on our own intelligence or we can say IoC that is also possible in MDE. Defender for Endpoint has features called Indicators where we can upload all

In Defender for Endpoint, the device group is a collection of devices. The device group can be created based on certain criteria or characteristics like operating system, location, device type, user group, and tag. In this post, we create based the device group based on the tag. A device group

Tags are the label that we put on devices to organize the device, filter the device, create device groups, apply RBAC, apply security policy, etc. There are multiple ways to set tags on a device. In this post, we will see how to create tags from the Defender portal and

Microsoft Defender for Endpoint(MDE) is a cloud-based endpoint security solution by Microsoft designed to help enterprises to prevent from threats. Below are its key features. We can have more read about it at What is MDE. In this post, we want to more focus on the plan from an

In this post, we discuss how to deploy a security baseline policy from MDM for MDE to enforce security policy to manage devices to protect against known security threats. Assume the situation where we have onboarded devices to MDE and get lots of recommendations to fix. We have multiple options

In this post, we discuss how to integrate Defender for Endpoint(MDE), compliance policy, and conditional access policy to protect company resources, devices, and data by enforcing security and compliance requirements. We use Microsoft Endpoint Manager admin center (Intune) for compliance policy and Azure Active Directory for conditional access policy

In the previous blog post, we onboarded unmanaged Windows 10 devices to the Microsoft Defender for Endpoint. In this post, we will onboard the Intune-managed devices. Manage device by Intune First, we will manage the device by Intune, in other words, onboard the device to Intune. Log in to the

This is the continuation post of the MDE series. How we onboard your device to Microsoft Defender for Endpoint (MDE) depends on the infrastructure architecture and how we are managing the endpoint devices like laptops, mobile devices, and even servers. We will start with laptops (Windows 10 and Windows 11)

There are multiple ways to move Azure DevOps project from one organization to another. In this post, we go through the easiest way which is from the DevOps portal. I have two DevOps organizations and moving the project from one to another. 1. Go to your project->Repos->Clone and