Monthly news – September 2024

new Predefined ID Classification Added to the list of critical assets. Please review the full list. Our Documents.

We’re excited to share it. Microsoft again named a leader in endpoint security.! This demonstrates our commitment to keeping our customers safe with Defender’s AI-based end-to-end protection. In today’s digital world, securing your devices is more important than ever, and Microsoft Defender ensures comprehensive security across all your devices. Read About our detailed blog that.

(preview) Global Exclusions for Linux is in public preview.. Global exclusions apply to Real-Time Protection (RTP), Behavior Monitoring (BM), and Endpoint Detection and Response (EDR). For more information, see Our Documents.

Evaluate Defender Antivirus using Defender Endpoint Security Settings Management.

This document describes the configuration. Options that guide you through enabling and testing the key protections of Defender Antivirus and Defender Exploit Guard on Windows 10 and later and Windows Server 2016 and later. Also provides instructions and links to more information.

Defender for Cloud Apps delivers a new, seamless app onboarding experience for inline capabilities.. We are eliminating all manual Entra ID app onboarding steps and automating the experience of enforcing session and access policies. Customers will also receive notifications on how to resolve common errors during the onboarding process.

This new experience Customers can create on-the-go data insurance policies using the Entra ID app directly from the Entra catalog, eliminating the need for MDA onboarding configuration.

(Preview) New Defender features for cloud apps”Large-scale export of activity logs” is now available in public preview! This new feature allows users to export records from the “Activity Log” page going back up to 6 months or 100,000 records, greatly improving your ability to investigate events and suspicious activity in your environment! For more information, visit: Export activities 6 months ago.

We are extending the capabilities of the Defender for Cloud app and Microsoft Edge browser to accommodate more use cases by implementing the following policies::
Threat Protection:
– Prevents malware from being downloaded from business SaaS apps to end-user devices.
– Prevents malware from being uploaded from devices to business SaaS apps.

Information Protection:
– Block sensitive file uploads to SaaS apps
-Paste block

Additionally, we now provide support for end users accessing SaaS apps on macOS.

With in-browser protection, Edge browser users (BYOD or company-owned devices) can enjoy a seamless app experience with no lag, no app compatibility issues, and a higher level of security, depending on session policies. Click here For more details.

Defender Reconfiguration Guide for Cloud Apps
We’ve reorganized the Defender for Cloud Apps documentation to highlight key product elements and use cases and align with the overall Microsoft Defender documentation.

To provide feedback on the Defender for Cloud Apps documentation, please use the feedback mechanisms located at the top and bottom of each documentation page.

Automating tenant allow/block list entries. We are excited to announce that we have recently launched:Last used date For domains, email addresses, URLs, or files that are allowed or blocked in Defender for Office 365. For blocked items, the last used date is updated when the filtering system detects the entity (either on click or in mail flow). For allowed items, an allowed item is triggered and the last used date is updated when the filtering system determines the entity is malicious (either on click or in mail flow). For more information, This blog post.

Security Architecture Design – How Defender for Office 365 Protects Against EchoSpoofing. This blog We provide short Overview Method This particular attack is exploited Their specific architecture and explain Architectural best practices implemented by Microsoft Defender for Office 365 help prevent security issues such as: echoSPuffing and Spoofing attack generally.

Availability of attack simulations and training in additional areas (ITA, ESP, MEX and ISR). Check Instructions on how to start attack simulation training.

Use Outlook’s built-in report buttons: Built-in report Buttons are now supported in Outlook for Microsoft 365 and Outlook 2021. User-reported settings How to report a message as phishing, junk, or not junk

(Preview) YNow you can run it simulation Include QR code payload Attack simulation trainingYou can track user responses and assign training to end users.