Exploring Microsoft 365 Defender – part 2 – Microsoft 365 Defender portal – Exploring cloud security concepts continues

Hi All,

Greetings for the day!!!

We will continue to discuss more important concept – SECURITY 🙂

What is Microsoft 365 Defender Portal

• In last article we started discussion about Microsoft 365 Defender – Explore Microsoft 365 Defender – part 1
• Just to recap
  • Microsoft 365 Defender is defense suite of services which provides detection, prevention, investigation and responses across following services against attacks / threats
    • Endpoints
    • Identities
    • Emails
    • Applications
  • Microsoft 365 Defender
    • Detect security risks
    • Investigate attacks
    • Prevent harmful attacks
    • Enable our security teams to perform detailed and effective threat hunting across endpoint and Office data
• Microsoft 365 Defender portal – central place for – combining protection, detection, investigation, and response to email, collaboration, identity, device, and cloud app threats

• Microsoft 365 Defender portal includes
  • Microsoft Defender for Office 365
  • Microsoft Defender for Endpoint
  • Microsoft Defender for Identity
  • Microsoft Defender for Cloud Apps

Note : We will discuss about each feature in separate upcoming articles

How to navigate to Microsoft 365 Defender Portal

How to navigate Microsoft 365 Defender portal – Small Tips and Tricks – Microsoft 365 Defender – How to navigate to Microsoft 365 Defender portal

Once we navigated we will be on Microsoft 365 Defender Portal home page as shown in above figure

Today in this article we will also discuss about Security Score

What is Security Score

• Microsoft security score represents security posture of our organization
• Higher number indicates more improvements actions require
• We could navigate to security score directly from URL as well – https://security.microsoft.com/securescore or by navigating to Microsoft Defender Portal – How to navigate Microsoft 365 Defender portal – Small Tips and Tricks – Microsoft 365 Defender – How to navigate to Microsoft 365 Defender portal
• What is security posture –
  • Security posture represents the current state of security of our organization
  • Microsoft has organised improvements actions in three groups – as shown in above figure as well
    • Identity (Azure Active Directory accounts & roles)
    • Device (Microsoft Defender for Endpoint, known as Microsoft Secure Score for Devices)
    • Apps (email and cloud apps, including Office 365 and Microsoft Defender for Cloud Apps)
  • One way to strengthen security posture of our organization is enabling MFA. We have detailed articles on MFA, kindly please have a look – https://knowledge-junction.in/?s=MFA

Improving our organization security score – actions needs to be taken

• As in above figure we have tab – “Improve your score“, as we click on it, we will be navigated to actions plan as shown in below fig

• Important point / very good point is Microsoft not only lists recommended actions but lots of details such as
  • Updating status
  • Implementation details / status
  • User Impact – Users who will get affected
  • What changes will take impact to our tenant
  • We have sharing option
  • Prerequisites required to complete action
  • What are next steps
  • Study material
• When we click on any recommended action, right pane opens with all the details as shown in below fig
• We have two tabs – as shown in below fig
  • General
  • Implementation
• “General” tab contains
  • Detailed description
  • Current implementation status
  • How the users of our tenant will get affected

• “Implementation” tab having details like – as shown in below fig
  • Prerequisites
  • Next steps
  • Study material / Learn more

• At the bottom, we have “Share” option as shown in below fig

• On the top we have “Status & action plan” as shown in below fig
• We could mark as “Planned” / “Risk accepted” as status and finalise the action

References

• Small Tips and Tricks – Microsoft 365 Defender – How to navigate to Microsoft 365 Defender portal
• Cloud Security – Azure Active Directory authentication – Configuring Multi Factor Authentication (MFA) – Part 3

Thanks for reading !!! If its worth at least reading once, kindly please like and share !! SHARING IS CARING 🙂

Enjoy the beautiful life !!! Have a FUN !!! TAKE CARE 🙂