Can user workflow verification be tested in an automated fashion using Microsoft Power Automate Flows, UI Flows and Automation Runbooks?

How to prioritize efforts based on alert information from Microsoft Defender ATP, Logic Apps, and Log Analytics.

Part 3 of series: Prioritizing Microsoft Defender ATP endpoint alert telemetry with MITRE ATT&CK.

This post demonstrates how to pull DATP data into Azure Log Analytics workspaces using a Logic App.

This post helps prioritize efforts based on alert information you're already receiving from Microsoft #Defender #ATP.

We’ve seen lots of COVID-19-related work-from-home tips, but how has it affected the attacker?

This container compromise scenario is difficult, but very plausible.

Is a container breakout to access the Kubernetes node possible? How might it work?

Part 4 in the Gaining Visibility into NIST SP 800-190 series explores Registry Risks and Registry Countermeasures.

Part Three of our series explores what native AWS tools and third-party solutions are available to address the risks identified in the NIST SP 800-190....

Part 2 in the Gaining Visibility into NIST SP 800-190 series is designed for security practitioners and others starting down the path of understanding....

In this blog we show an example of a basic formation template attack. It’s opportunistic and it would be very hard to target a specific organization....