Ciao a tutti, il 6 dicembre ho avuto per la seconda volta l'onore di essere speaker alla #POWERCON2023 ho parlato di Microsoft Sentinel e di come automatizzare gli Incident di Sicurezza.
Vi lascio il link con il materiale di questa sessione:
I'm so happy to share my first article in English, help community all over the world for me is fantastic! Today in this article i share you a way to disable Defender for Endpoint with Live Response, without interaction on the endpoint, in this way Helpdesk or IT are autonomous to do this activity. I made the following steps to made it possibile: Create Powershell Script to Disable Tamper Protection and Realtime Monitoring Create Powershell Script to Enable Tamper Protection and Realtime Monitoring Create Powershell Script to verify if operation is made correctly To share you this i use my Tenant Microsoft 365 and one Endpoint that is onboarded on Microsoft Defender portal Fig 1: Endpoint Onboarded on Microsoft Defender Portal And i use Microsoft 365 E5 license, to view all Microsoft License i report to you Aaron Dinnage websites that show detailed license of Microsoft 365 Home | M365 Maps Fig 2: License used for Demo Ok let's go now i create the powershell script (is very fas...