Kurt Shintaku's Blog

Do you need a “one page” guide to investigate suspicious activity in Microsoft 365 and Microsoft Entra?

This guide (and more) contains the artifacts that Microsoft Incident Response hunts for and uses daily. This includes E-mail manipulations, Data collections, Login events etc.

You can also read & download more here:

• New Microsoft Incident Response guides help security teams analyze suspicious activity
  https://www.microsoft.com/en-us/security/blog/2024/01/17/new-microsoft-incident-response-guides-help-security-teams-analyze-suspicious-activity/?msockid=0f62e881cee7693e2d81fc18cf1268e1

#microsoft #irt #security #microsof365 #msftadvocate #entra #cybersecurity