Microsoft Defender for Endpoint

Microsoft has announced some changes coming to the security settings management capabilities in Microsoft Defender for Endpoint this month. The company plans to remove the Azure Active Directory (AD) join or Hybrid Azure AD join enrollment requirement for Windows devices. Last year, Microsoft released a new feature called Security Management for Microsoft Defender for Endpoint….

Microsoft has released a new update that enables IT admins to manage security configuration settings directly in Microsoft Defender for Endpoint. The native security management capabilities are available in public preview on Windows, macOS, and Linux. Previously, IT administrators had to depend on external tools for handling endpoint security settings. This approach often resulted in…

Microsoft Defender for Endpoint has announced that Device isolation and Antivirus scanning capabilities are now available in preview for macOS and Linux devices. The new response actions should help to protect organizations against security threats. The device isolation feature blocks the compromised device from connecting to the corporate network. Meanwhile, Microsoft Defender for Endpoint continues…

Key takeaways: Microsoft Defender for Endpoint has introduced device tagging support in public preview for mobile devices. This capability allows IT admins to tag iOS and Android devices during the onboarding process. Microsoft highlighted that tags enable administrators to label and classify devices in enterprise environments. The feature is designed to enhance searching and organization…

Microsoft has introduced support for mixed licensing in its Microsoft Defender for Endpoint solution. The new capability allows IT admins to control how licenses are applied to client devices in enterprise environments. Microsoft Defender for Endpoint is a security solution that provides threat detection and response capabilities to protect endpoints (such as laptops, computers, and…

Microsoft Defender for Endpoint has introduced a new monthly security summary report in public preview. The new tool enables IT admins to gain detailed insights into the performance and security posture of their organization. “The report helps organizations get a visual summary of key findings and overall preventative actions taken to enhance the organization’s overall…

Microsoft Defender for Endpoint is getting a new update that will enable IT admins to discover internet-facing devices. The new feature leverages the existing network telemetry and RiskIQ integration to automatically map all onboarded devices that are connected to the internet. Microsoft has clarified that identifying and prioritizing internet-facing devices to address potential security threats…

Cloud Conversations is a regular podcast that we’ll be featuring here on Petri. It’s about everything connected to cloud computing, including technologies like Azure, Microsoft 365, Power Platform, Microsoft Endpoint Manager (MEM), Microsoft Defender, Windows, Intune, and much more! Cloud Conversations: Paul Huijbregts, Justen Graves, and Joe Anich on Microsoft Defender for Endpoint Paul Huijbregts, Justen Graves, and returning guest…

Microsoft Defender for Endpoint has introduced device isolation support in public preview on onboarded Linux machines. The security feature enables IT admins to isolate Linux machines manually via the Microsoft 365 Defender portal or API requests. According to Microsoft, the threat actors will no longer be able to remotely connect with the isolated Linux devices….

Microsoft has partnered with Corelight to add a new Zeek integration to its Defender for Endpoint solution. The new integration helps to reduce the time required to detect sophisticated network-based threats in enterprise environments. Zeek is an open-source tool that monitors network traffic packets to detect malicious activity within a network. Microsoft Defender for Endpoint…