Your browser does not support JavaScript.
Nathan McNulty
CTRL
K
Nathan McNulty
Blog
Notes
Toggle Dropdown
Azure
Defender
Entra
Intune
Purview
Other
Solutions
Toggle Dropdown
Azure
Defender
Entra
Intune
Purview
Other
Media
Archives
Personal
GitHub
GitHub
Ko-fi
Ko-fi
LinkedIn
LinkedIn
RSS
X
Twitter
Theme
Auto
Dark
Light
Browse Notes
Azure
Azure Activity Logs
Azure service IP ranges
Cost anomaly alerts
Defender for Servers on selected machines
Limit Azure Arc management
Log Analytics ingestion delay
Defender
Defender AV notifications
Defender email policy precedence
Defender for Identity Labs
FQDN filtering and NRPT
Query commonly abused binaries
Simplify MDE for macOS deployment
Entra
Admin browser profiles
Audit device code flow
Authentication registration report
Authentication rollout templates
Block unknown and unsupported platforms
Common misunderstandings of Conditional Access
Entra LAPS password history
Getting more from CA Insights and Reporting
Hello for Business Guidance
Microsoft Graph PowerShell examples for Application Management
PIM Alerts
Scope application mailbox access
Intune
Multi Admin Approval
Purview
Enable all auditable events
Other
Capture network traffic in Chrome and Edge
Find open files with openfiles
ForEach-Object -Parallel
Guest resharing
Lookalike domain checks
OneDrive file requests
Protected Users
Restart into firmware
VS Code extension allowlist
Home
Notes
Purview
Purview
In this section
Enable all auditable events
The defaults are better than they used to be, but you can still do better.
Wednesday, October 14, 2026
Monday, January 1, 1
X
LinkedIn
Reddit
Intune
Other