Microsoft 365 Defender Ninja August 2021 special edition!

Are you enjoying the summer or winter – wherever you are in the world, and want to keep up to date with the latest and greatest? We can help you cure that need :smiling_face_with_smiling_eyes:

Over the past few months, we have made big product announcements across the Microsoft Defender products and Microsoft Cloud App Security, and of course we want you to stay updated!

With the following resources you can bring yourself up to speed, and with the knowledge check at the end you can verify your learnings. Plus, you can request either a Ninja summer or winter special edition fun certificate to enrich your Ninja certs collection!

 

 

Legend:

Product videos	Webcast recordings	Tech Community
Docs on Microsoft	Blogs on Microsoft	GitHub
⤴ External	Interactive guides

 

Microsoft Defender for Endpoint

 

Unmanaged devices

•  Unmanaged device protection capabilities
•  Device discovery
•  Endpoint Discovery - Navigating your way through unmanaged devices

Mobile threat defense

•  New capabilities on Android and iOS

Threat and vulnerability management

•  Threat and Vulnerability Management now supports all major platforms
•  Secure configuration assessment for macOS and Linux
•  Vulnerability management for Linux
•  Threat and vulnerability management integrates with ServiceNow VR

Device control

•  Control your USB devices on Mac
•  Device control for MacOS
•  Protect your removable storage and printers

Live response

•  Live response API

Evaluation Lab

•  Renew your lab resources and try new simulations
•  Microsoft Defender for Endpoint evaluation lab

 

Microsoft 365 Defender:

 

Threat Analytics

•  Threat analytics
•  Overview of Threat Analytics

Advanced hunting

•  Take action on advanced hunting query results
•  Data tables in the Microsoft 365 Defender advanced hunting schema
•  DeviceFromIP() function in advanced hunting

Integration and APIs

•  Overview of the Streaming API
•  Streaming API Announcement blog
•  Stream Microsoft 365 Defender events
•  Azure Sentinel and Microsoft 365 Defender incident integration
•  Overview Azure Sentinel integration
•  Azure Sentinel integration

 Webinar: Monthly threat insights: New webinar series: Monthly threat insights - Microsoft Tech Community

 

 

Defender for Office 365:

 

Phishing protection

•  Announcing General Availability of Safe Links for Microsoft Teams

Business Email Compromise

•  Business email compromise: How Microsoft is combating this costly threat

Incident investigation

•  Introducing the email entity page
•  Spoof intelligence insight in EOP

Configuration

•  Mastering configuration Part 1
•  Mastering configuration Part 2

 Threat Analytics

•  Threat analytics report tags

Attack Simulation Training

•  Updates to Attack Simulation Training
•  Setting up a New Phish Simulation Program - Part One
•  Setting up a New Phish Simulation Program - Part Two

 

Defender for Identity:

 

General:

•  Use Defender for Identity to de-risk your organizations lateral movement paths
•  Make powerful Advanced Hunting queries in Microsoft 365 Defender using Defender for Identity data
•  Deep dive into the latest Defender for Identity detections with the engineering team

Portal Convergence:

•  Portal convergence tracking blog – with the latest updates on what’s happening and when
•  Defender for Identity’s settings and configuration now in Microsoft 365 Defender
•  Microsoft Defender for Identity in Microsoft 365 Defender

Detections

•  Suspected exploitation attempt on Windows Print Spooler service
•  Suspected AS-REP Roasting attack

Identity Security Posture Management assessments

•  Microsoft Defender for Identity legacy protocols identity security posture assessment
•  Microsoft Defender for Identity unconstrained Kerberos identity security posture assessment

 

Cloud App Security:

 

3^rd Party Integration

•  How Cloud App Security helps protect your Slack Enterprise
•  How Cloud App Security helps protect your Zendesk
•  How Cloud App Security helps protect your OneLogin

Threat Protection

•  Overview - Advanced hunting
•  The Hunt in a multi-stage incident
•  MCAS: Top 5 Queries You Need to Save
•  Hunting with Microsoft Cloud App Security data

Conditional Access App Control

•  Deploy Cloud App Security Conditional Access App Control for any web app using AD FS
•  Bypass Blocking PDF Previews in OWA

Data Loss Prevention

•  MCAS Data Protection Blog Series: MCAS DLP Walk-Through
•  Integrate Azure Information Protection with Cloud App Security

 

If you want to verify your learnings, you can participate in this knowledge check.

Once you’ve finished the knowledge check, please click here to request your certificate (you'll see it in your inbox within a couple of  days.)

 

Let us know how you like it!

 

As a reminder, the full Ninja Trainings are here:

 

Microsoft 365 Defender > http://aka.ms/m365dninja  

Microsoft Defender for Office 365 > https://aka.ms/mdoninja

Microsoft Defender for Endpoint > http://aka.ms/mdeninja

Microsoft Defender for Identity > http://aka.ms/mdininja

Microsoft Cloud App Security > http://aka.ms/mcasninja