Articles by tag: secops

Disabling DLP alerts in Defender: migration to Purview

Microsoft has disabled sensitive data alerts in Defender for endpoints. Instructions for migrating to Purview DLP, steps to check policies and implications for SecOps. Relevant for IT specialists.

Shadow RDP bypasses MFA in Azure

Analysis of Shadow RDP attack: how hackers hijack admin sessions in hybrid Azure AD environment. Logs, detection, protections. For middle/senior DevOps and SecOps — implement GPO and Conditional Access.