Microsoft Sentinel’s Microsoft Defender XDR connector with incident integration allows you to stream all Microsoft Defender XDR incidents and alerts into Microsoft Sentinel, and keeps the incidents synchronized between both portals. Microsoft Defender XDR incidents include all their alerts, entities, and other relevant information. They also include alerts from Microsoft Defender XDR’s component services Microsoft Defender for Endpoint, Microsoft Read More
How to Get the Microsoft Security Score from Command Line
To get the Microsoft security score from the command line, you can use PowerShell commands. Here’s a general approach: Here’s an example of how you might use PowerShell to get the security score: Remember, you may need to adjust the commands based on your specific environment and permissions. Also, ensure that you have the necessary Read More
How to Export the Last Sign-In Time for All Users in Entra ID (Azure AD) Using Microsoft Graph
Microsoft Graph is a powerful tool that allows administrators to manage their Azure AD tenant and automate tasks. One common task is to retrieve the last sign-in date time for all users in Azure AD. This information can be used to track user activity and identify any inactive accounts that may need to be disabled Read More
How to Fix Teams Meeting add-in is Missing in Outlook Desktop after Updating to New Teams
ISSUE After updating to New Teams, you notice the following issues: This issue happens if the update to New Teams did not properly install the Teams Meeting Add-in. STATUS: RESOLUTION The steps below will result in New Teams installing the Teams Meeting Add-in. If you have both Teams Classic and New Teams installed, use Option 1. If Read More
How to Log Messages from a Remote Host to a Specific File in Rsyslog
Sometimes, you may want to save the log from a remote server to a specific file instead of /var/log/messages. you can set up log forwarding later that won’t include lots of junk. Step 1 Create a new conf file in /etc/rsyslog.d with below two lines, for example. we are going to save the log messages Read More
How to Monitor Sign-in of Emergency Access Accounts in Microsoft Entra ID
Quick Reference: Monitor sign-in and audit logs Organizations should monitor sign-in and audit log activity from the emergency accounts and trigger notifications to other administrators. When you monitor the activity on break glass accounts, you can verify these accounts are only used for testing or actual emergencies. You can use Azure Log Analytics to monitor Read More