Defender for Endpoint

  • 2 Posts
  • 1 Sections
  • 1 Types
December 2, 2024 2 min read Notes
Nathan McNulty
Query commonly abused binaries
Defender for Endpoint KQL
Hunt for copied or renamed ie4uinit processes with version metadata and context.
Read more about Query commonly abused binaries.
November 10, 2024 1 min read Notes
Nathan McNulty
Simplify MDE for macOS deployment
Defender for Endpoint Intune
Bundle several Defender macOS permissions in one profile, then check the remaining deployment requirements.
Read more about Simplify MDE for macOS deployment.

Nathan McNulty

Azure, Defender, Entra, Intune, and more