Defender - Frode Hus

Frode Hus

Sign in Subscribe

Defender

A collection of 2 posts

How apps can become first-class citizens in Microsoft Sentinel

How apps can become first-class citizens in Microsoft Sentinel

Many applications that are developed either as an in-house application or a SaaS offering often provide functionality that are useful or even essential for Security Operations Center to have insight into. So, how can we offer a direct integration into security solutions?

Detection rules as code

Detection rules as code

With the introduction of the msgraph-provider, it is now quite easy to deploy your custom detection rules to Microsoft Defender fully automatically using Terraform. The immediate benefit of doing this is that in addition to easily deploy large rulesets across tenants, you also get version control on all detection rules