Mastering Microsoft 365 Defender

Ruairidh (Ru) Campbell is a Microsoft Security MVP and leads Microsoft consultancy at Threatscape.At Threatscape, Ru develops, delivers, and manages offerings and professional services for cybersecurity, compliance, identity, and management.In the cybersecurity community, Ru runs the Microsoft 365 Security & Compliance user group and his blog, regularly speaks at other user groups and conferences, and contributes to well-known industry publications such as Practical 365.Ru holds 14 Microsoft certifications and a B.Sc. (Distinction) in computer networking from the University of the West of Scotland. Away from cybersecurity, he is a petrolhead who enjoys heavy metal and hiking around Scotland with his wife. Viktor Hedberg is a Microsoft Security MVP and senior consultant at Truesec.At Truesec, Viktor works with proactive security measures within the Microsoft sphere of technologies, by delivering workshops on best practices and by his deep technical expertise in these areas.In the cybersecurity community, Viktor runs his blogs at Truesec (Experts – viktor-hedberg). Alongside this, he is one of the hosts of the Swedish Windows Security user group, as well as a co-host of the Swedish podcast The Nerd Herd. He is a frequent speaker at both conferences and user groups around the world, focusing on matters of Microsoft Security.Viktor holds numerous Microsoft certifications, as well as being a Microsoft Certified Trainer. Away from cybersecurity, Viktor is a family man, spending most of his time with his wife and three kids, as well as enjoying football, both as a practitioner and as a fan. Heavy metal has been part of his life since his early teens.

• Table of ContentsMicrosoft and Modern Cybersecurity ThreatsMicrosoft 365 Defender: The Big PictureThe Fundamentals of Microsoft Defender for EndpointOnboarding Windows Clients and ServersGetting Started with Microsoft Defender Antivirus for WindowsAdvanced Microsoft Defender Antivirus for WindowsManaging Attack Surface Reduction for WindowsManaging Additional Capabilities for WindowsOnboarding and Managing macOSOnboarding and Managing Linux ServersOnboarding and Managing iOS and AndroidDeploying Microsoft Defender for IdentityManaging Defender for IdentityDeploying Exchange Online ProtectionDeploying Defender for Office 365Implementing and Managing Microsoft Defender for Cloud AppsMaintaining Security Hygiene and Threat AwarenessExtended Detection and Response with Microsoft 365 DefenderAdvanced Hunting with KQLMicrosoft Sentinel IntegrationUnderstanding Microsoft 365 Defender APIsGlossaryAnswers