Skip to content

Commit

Permalink
Update June 25-2024
Browse files Browse the repository at this point in the history
  • Loading branch information
alexverboon committed Jun 24, 2024
1 parent a1b7cf0 commit 6ecc10c
Show file tree
Hide file tree
Showing 6 changed files with 12 additions and 1 deletion.
6 changes: 6 additions & 0 deletions docs/GitHub.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,10 @@

- [MDTI Solutions](https://github.com/Azure/MDTI-Solutions)

## ITDR

- [ITDR - Identity Threat Detection and Response](https://github.com/nicolonsky/ITDR)

## KQL

- [Microsoft Defender 365 raw data schema - Overview](https://github.com/Iveco/xknow_infosec/blob/main/M365D_tables.md)
Expand All @@ -45,3 +49,5 @@
- [richlilly2004 MDATP hunting queries](https://github.com/richlilly2004/Microsoft-Defender-ATP)
- [KQL Tools](https://github.com/microsoft/KqlTools)
- [CGCFAD Hunting Queries](https://github.com/CGCFAD/WDATP-Advanced-Hunting)
- [Falcon Friday](https://github.com/FalconForceTeam/FalconFriday)

1 change: 1 addition & 0 deletions docs/mdca.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@

## Microsoft Tech Community Blogs

- [Data Protection Made a Breeze: MDA integration in Edge for Business](https://cloudbrothers.info/en/data-protection-breeze-mda-integration-edge-business/)
- [Microsoft Defender for Cloud Apps’ Shadow IT Discovery Capabilities Now Support MacOS](https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/microsoft-defender-for-cloud-apps-shadow-it-discovery/ba-p/4159677)
- [Defender for Cloud Apps delivers new in-browser protection capabilities via Microsoft Edge](https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/defender-for-cloud-apps-delivers-new-in-browser-protection/ba-p/4129857)
- [Safeguarding your OAuth apps with App Governance](https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/safeguarding-your-oauth-apps-with-app-governance/ba-p/3837343)
Expand Down
1 change: 1 addition & 0 deletions docs/mde.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@

## Microsoft Tech Community Blogs

- [Get more device control flexibility with BitLocker settings in Defender for Endpoint](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/get-more-device-control-flexibility-with-bitlocker-settings-in/ba-p/4175131)
- [Detect suspicious processes running on hidden desktops](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/detect-suspicious-processes-running-on-hidden-desktops/ba-p/4072322)
- [Simplify triage with the new Alert Timeline](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/simplify-triage-with-the-new-alert-timeline/ba-p/4152653)
- [Offline Security Intelligence Update is now GA](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/offline-security-intelligence-update-is-now-ga/ba-p/4102370)
Expand Down
1 change: 1 addition & 0 deletions docs/mdti.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@

## Microsoft Tech Community Blogs

- [Copilot for Security TI Embedded Experience in Defender XDR is now GA](https://techcommunity.microsoft.com/t5/microsoft-defender-threat/copilot-for-security-ti-embedded-experience-in-defender-xdr-is/ba-p/4114858)
- [Unleash the Power of Threat Intel: Introducing the MDTI GitHub](https://techcommunity.microsoft.com/t5/microsoft-defender-threat/unleash-the-power-of-threat-intel-introducing-the-mdti-github/ba-p/3884452)
- [New Threat Actor Intel Profiles Added to Defender TI](https://techcommunity.microsoft.com/t5/microsoft-defender-threat/new-threat-actor-intel-profiles-added-to-defender-ti/ba-p/3841181)
- [What's New: Defender TI Intel Reporting Dashboard and Workbook](https://techcommunity.microsoft.com/t5/microsoft-defender-threat/what-s-new-defender-ti-intel-reporting-dashboard-and-workbook/ba-p/3812899)
Expand Down
3 changes: 2 additions & 1 deletion docs/securitycopilot.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

- [What’s new in Defender: How Copilot for Security can transform your SOC](https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/what-s-new-in-defender-how-copilot-for-security-can-transform/ba-p/4084222)
- [Operationalizing Microsoft Security Copilot to Reinvent SOC Productivity](https://techcommunity.microsoft.com/t5/microsoft-defender-xdr-blog/operationalizing-microsoft-security-copilot-to-reinvent-soc/ba-p/3944877)

- [Microsoft Copilot for Security Attains ISO 27001, 27017, and 27018 Certifications](https://techcommunity.microsoft.com/t5/microsoft-security-copilot-blog/microsoft-copilot-for-security-attains-iso-27001-27017-and-27018/ba-p/4161758)
- [Exploring Copilot for Security to Automate Incident Triage](https://techcommunity.microsoft.com/t5/microsoft-security-copilot-blog/exploring-copilot-for-security-to-automate-incident-triage/ba-p/4154887)
- [Updates to Security Admin permissions for Microsoft Copilot for Security](https://techcommunity.microsoft.com/t5/microsoft-security-copilot-blog/updates-to-security-admin-permissions-for-microsoft-copilot-for/ba-p/4140692)
Expand Down Expand Up @@ -38,6 +37,8 @@

## Community Blogs

- [How to onboard and getting started with Copilot for Security](https://jeffreyappel.nl/how-to-onboard-and-getting-started-with-copilot-for-security/)

## GitHub

- [Microsoft Copilot For Security Community](https://github.com/Azure/Copilot-For-Security/)
1 change: 1 addition & 0 deletions docs/sentinel.md
Original file line number Diff line number Diff line change
Expand Up @@ -526,6 +526,7 @@
- [Defending Azure Active Directory with Azure Sentinel](https://learnsentinel.blog/2021/10/19/defending-azure-active-directory-with-azure-sentinel/)
- [Keep an eye on your Azure AD guests with Microsoft Sentinel](https://learnsentinel.blog/2021/11/04/keep-an-eye-on-your-azure-ad-guests-with-microsoft-sentinel/)


## Playbooks

- [Synchronize TOR Exit Nodes to Azure AD Named Location List using the free Big Data Cloud API](https://github.com/Azure/Azure-Sentinel/tree/master/Playbooks/Update-NamedLocations-TOR)

0 comments on commit 6ecc10c

Please sign in to comment.