365 Defender – Safe attachments’ policy & Safe Documents

As you all know, attackers, use widely malicious attachments to perform “Initial access”. Safe attachments is one of our defences in order to prevent that in our Environment Safe Attachments provides an additional layer to the Antimalware Exchange protection. Safe Attachment works with Machine Learning in order to protect your users inbox Policies may take … Continue reading 365 Defender – Safe attachments’ policy & Safe Documents

Phish delivered due to an ETR override – Defender & Sentinel

This alert fires when message containing phish was delivered due to an ETR override. ( mail flow rule ) In order to resolve and troubleshoot . We have to get into the exchange mail flow portal and investigate why could potentially a mail flow rule allow phising emails . In the following scenario we have … Continue reading Phish delivered due to an ETR override – Defender & Sentinel

Monitor 365 OneDrive Sync Failures in your tenant

A new preview feature is now available to Monitor Sync problems with OneDrive As proactive measure , if you recently migrated to Teams/Sharepoint . Many companies are relying on in OneDrive sync to give an experience for the user similar to a File Server. Once you enabled the Monitoring, you also need to deploy in … Continue reading Monitor 365 OneDrive Sync Failures in your tenant

Cleaning up old Sharepoint Files

Download /Install the PNP module : https://www.powershellgallery.com/packages/PnP.PowerShell/1.12.0 I have find a very usefull script To archive files in Sharepoint This script is setup to clean up 8 Year Old files but you may modify this on the script The files will go into the recycle bin site . Effectively you have a rollback from disaster … Continue reading Cleaning up old Sharepoint Files

Onboarding Deploy Defender for endpoint via intune –

As part of security measures , enviorments should be monitored and gaining visibility of threats . For this you can integrate defender for endpoint so all your machines report any threats in form of alerts or automated responses. Make sure you get covered all the licensing requeriments Go in the endpoint Security blade in intune … Continue reading Onboarding Deploy Defender for endpoint via intune –