Håkon Prestvik

3 min read

Making use of data from Microsoft Defender Timeline in Sentinel

We recently worked on an incident with a client that had Defender for Endpoint with a Microsoft Business Premium license. This version of Defender XDR has the detection capabilities of EDR but lacks endpoint telemetry in Advanced hunting which as a...

Read More