Generated by All in One SEO v5.0.0.1, this is an llms.txt file, used by LLMs to index the site. # Cyber Geeks | Cyber Security & Cloud Computing Cyber Security & Cloud Computing ## Sitemaps - [XML Sitemap](https://cybergeeks.cloud/sitemap.xml): Contains all public & indexable URLs for this website. ## Posts - [Microsoft Defender Mind Map](https://cybergeeks.cloud/2022/08/microsoft-defender-mind-map/) - Major Updates: 8/3/2022 - Version 12/2026 - latest updates Are you trying to understand all the products that are part of the Microsoft Defender family?! I have created this Mind Map to help you with that. You can download the PDF at the end of this page. Download MicrosoftDefender_MindMap - [SafeLogin: Protecting Your Entra ID Tenant Against Advanced Phishing Attacks](https://cybergeeks.cloud/2024/08/safelogin-protecting-your-entra-id-tenant-against-advanced-phishing-attacks/) - Introduction In today's world, digital security is a top priority for both companies and individuals. Among the various cyber threats, phishing attacks remain one of the most effective methods for compromising accounts and stealing sensitive information. With the evolution of phishing techniques, such as Man-in-the-Middle (MitM) attacks using tools like Evilginx2, the need for innovative - [Microsoft Defender for Servers - An Overview - Part I](https://cybergeeks.cloud/2023/01/microsoft-defender-for-servers-an-overview-part-i/) - Microsoft Defender for Servers – Part I Today, I'd like to present the Defender for Servers plan offered by Microsoft. This plan provides comprehensive protection for your Windows and Linux servers, whether they are running on Azure, AWS, GCP, or on-premises. Furthermore, it seamlessly integrates with Defender for Endpoint, providing a comprehensive, end-to-end threat protection - [Microsoft Sentinel Agent for SAP Deployment Guide on OpenShift](https://cybergeeks.cloud/2024/08/microsoft-sentinel-agent-for-sap-deployment-guide-on-openshift/) - This guide provides detailed steps for deploying the Microsoft Sentinel agent for SAP on an Azure Red Hat OpenShift cluster. It covers the creation of the necessary resources in Azure, environment configuration, and deployment of the Connector Agent for SAP. 1. Creating an Azure Red Hat OpenShift (ARO) Cluster Start by setting up an Azure - [Monitoring Generative AI apps- Defender for Cloud Apps + MDE](https://cybergeeks.cloud/2024/07/monitoring-generative-ai-tools-defender-for-cloud-apps-mde/) - Welcome back to the blog, it’s been a while! Today, we're diving into a hot topic: how to use Defender for Cloud Apps and MDE to monitor and block Generative AI apps. With AI becoming more integrated into our workflows, it's crucial to ensure these powerful applications are used safely and responsibly. I'll guide you - [How M365 Defender can stop advanced cyberattacks with XDR and Automatic Attack Disruption](https://cybergeeks.cloud/2023/08/how-m365-defender-can-stop-advanced-cyberattacks-with-xdr-and-automatic-attack-disruption/) - Introduction Cyberattacks are becoming more sophisticated and persistent, targeting organizations of all sizes and industries. Attackers use multiple techniques to evade detection, compromise systems, steal data, and disrupt operations. To defend against these threats, organizations need a comprehensive and unified security solution that can provide visibility, investigation, and response across the entire attack surface. Tools - [MDI lab - DC running out of memory](https://cybergeeks.cloud/2024/03/mdi-lab-dc-running-out-of-memory/) - This is just a quick tip, as I encountered this issue when configuring one of my lab environments. Ensure you have enough memory; otherwise, your MDI sensor on the DC will not start. You can end up with the following error in the event viewer. General: Service cannot be started. System.OutOfMemoryException: Exception of type 'System.OutOfMemoryException' - [KQL fundamentals – Where operator](https://cybergeeks.cloud/2021/07/kql-fundamentals-where/) - Level: Beginner | Reading time: 5 minutes We saw in the last post about KQL fundamentals – Search operator, how to get started in the world of searches using the Search operator. In this article we will evolve a little more to another very useful one: Where. It is also worth remembering that this subject - [KQL Fundamentals – Extend](https://cybergeeks.cloud/2022/03/kql-fundamentals-extent/) - Level: Beginner | Reading time: 5 minutes Let’s continue our series on KQL with a focus on Cyber Security. Let’s talk today about how to use the Extend command. Other posts can be seen in our KQL category. You can use the extent command to create new calculated columns and append them to the result set, this adds a - [Zero Trust Maturity Mind Maps](https://cybergeeks.cloud/2023/03/zero-trust-maturity-mind-maps/) - Zero Trust Maturity Mind Map Reference: Evolving Zero Trust – Microsoft Position Paper. Ever since the term Zero Trust came out regarding cyber security, manufacturers, partners, and professionals have provided a range of perspectives. Some manufacturers provide Zero Trust to one specific area like identity or devices. Some businesses may view Zero Trust as something - [Connect AWS to Microsoft Defender for Cloud](https://cybergeeks.cloud/2022/05/connect-aws-to-microsoft-defender-for-cloud-apps/) - Connect AWS to Microsoft Defender for Cloud In this post, I will show how to connect your AWS cloud to Microsoft Defender for Cloud. Defender for Cloud is a security posture management (CSPM) and cloud workload protection (CWP) platform. It protects Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) workloads. Using Azure Arc, - [Microsoft Defender Threat Intelligence (MDTI) Mind Map](https://cybergeeks.cloud/2022/11/microsoft-defender-threat-intelligence-mdti-mind-map/) - Date of publication: 11/21/2022 Download here MDTI_MindMap Microsoft Defender Threat Intelligence MDTI Former RiskIQ Defender Threat Intelligence (MDTI) Maps the entire internet to expose threat actors and their infrastructure Defender External Attack Surface Management (EASM) Discover unknown and unmanaged resources that are visible and accessible from the internet (outside-in view) Learn Ninja Training Videos MDTI - [Microsoft Defender Threat Intelligence (MDTI) overview](https://cybergeeks.cloud/2022/11/microsoft-defender-threat-intelligence-mdti-overview/) - What is MDTI? Microsoft Defender Threat Intelligence (MDTI) is a threat hunting and investigation solution that provides context on cyber threats, IoCs, threat actors, and related infrastructure via raw data sets and finished TI (Threat Intelligence) necessary to accelerate investigations. It can provide finished intelligence with actionable IOCs authored by Microsoft researchers with the ability - [#Lab: How to integrate Alien Vault OTX Threat Indicators into Microsoft Sentinel](https://cybergeeks.cloud/2022/05/how-to-integrate-alien-vault-otx-threat-indicators-into-microsoft-sentinel/) - The purpose of this blog is to show you how to integrate Alien Vault OTX Threat Indicators into Microsoft Sentinel. I've been working with my peer Brian B with Sentinel Threat Intell integrations, and I wanted to thank Brian for the revision and contribution to this article! The most common ways to connect threat intelligence - [Microsoft Sentinel Threat Intelligence - Part I - Overview](https://cybergeeks.cloud/2022/06/microsoft-sentinel-threat-intelligence-part-i/) - Microsoft Sentinel is a cloud-based Security Information and Event Management (SIEM) solution and a Security orchestration, automation, and response (SOAR) platform. In this post, I will explore the possibilities of leveraging cyber threat intelligence (CTI) feeds on Sentinel so that you can use the threat indicators, also known as Indicators of Compromise or IoCs, to detect, provide context, and respond - [Microsoft Sentinel Threat Intelligence – Part II - View and manage your threat indicators](https://cybergeeks.cloud/2022/06/microsoft-sentinel-threat-intelligence-part-ii-view-and-manage-your-threat-indicators/) - In the first part of this series, I showed what threat intelligence is, how Microsoft Sentinel integrates with external feeds, and some use cases. Today, I want to cover how you can view and manage your threat indicators on the Microsoft Sentinel portal. Threat Intelligence Indicator Table (KQL) If you are wondering - where is my - [Microsoft Sentinel Threat Intelligence – Part III - Using your TI data with Analytics Rules](https://cybergeeks.cloud/2022/07/microsoft-sentinel-threat-intelligence-part-iii-using-your-ti-data-with-analytics-rules/) - In my last post, I showed you how to view and manage your threat indicators on the Sentinel portal. Today, I am going to show you what to do with these threat indicators, starting with the analytics rules. What are Analytics Rules? One of the most important use cases for threat indicators in a SIEM - [Microsoft Sentinel Threat Intelligence – Part IV – Using Workbooks](https://cybergeeks.cloud/2022/09/microsoft-sentinel-threat-intelligence-part-iv-using-workbooks/) - In my last blog post, I talked about how to use Threat Intelligence data along with Sentinel analytics rules. Today, I'm going to show you how to work with Workbooks to generate reports and dashboards, making it even easier to visualize TI data. Azure Workbooks If you are not familiar with Azure Workbooks, please check this link to - [KQL Fundamentals – Project](https://cybergeeks.cloud/2022/07/kql-fundamentals-project/) - Level: Beginner | Reading time: 10 minutes We are continuing our series on KQL with a focus on Cyber Security. So, tet’s talk today about how to use the Project command. Other posts can be seen in our KQL category. If you want to project columns from a table to display them in the query results, you can use the - [KQL Fundamentals - Take/Limit](https://cybergeeks.cloud/2021/07/kql-fundamentals-take-limit/) - Level: Beginner | Reading time: 5 minutes Let’s continue our series on KQL with a focus on Cyber Security. Let’s talk today about how to use the Take/Limit operators. Other posts can be seen in our KQL category. The Take or Limit (which is nothing more than an alias for Take and has the same effect), is very simple - [KQL fundamentals - Search operator](https://cybergeeks.cloud/2021/07/kql-basics-search-operator/) - Level: Beginner | Reading time: 5 minutes We have already seen in the article "KQL Overview – Kusto Query Language" what it is about and how to use the Kusto Query Language to hunt for threats in Sentinel and MDE. In this series, I want to bring you a basic, practical and quick guide on - [KQL Overview - Kusto Query Language](https://cybergeeks.cloud/2021/07/overview-kql-kusto-query-language/) - Level: Beginner | Reading time: 10 minutes Are you familiar with the KQL query language - Kusto Query Language? It is used to perform data analysis and to hunt for threats in Microsoft Sentinel, create Analytics and Workbooks, and also to hunt in Defender for Endpoint and other solutions. This post will give you an - [KQL Fundamentals – Count](https://cybergeeks.cloud/2021/08/kql-fundamentals-count/) - Level: Beginner | Reading time: 5 minutes Let's continue our series on KQL with a focus on Cyber Security. Let's talk today about how to use the Count operator. Other posts can be seen in our KQL category. The Count operator is used to return a count of summarized or total records. It basically returns the number of - [KQL Fundamentals – Summarize](https://cybergeeks.cloud/2021/09/kql-fundamentals-summarize/) - Level: Beginner | Reading time: 5 minutes Let’s continue our series on KQL with a focus on Cyber Security. Let’s talk today about how to use the Summarize operator. Other posts can be seen in our KQL category. We can think of Summarize as an aggregator, as it produces a table that groups (or summarizes) the contents of the - [Defender for Cloud Apps - Client-certificate auth](https://cybergeeks.cloud/2022/07/defender-for-cloud-apps-client-certificate-auth/) - In this week's post, I want to address the following question - Can I have access control for some vendors that cannot register their computers to my Azure AD tenant? They need to access my Azure Portal to manage some virtual machines and other activities, but I won't join their devices or even use Intune in this - [Microsoft Sentinel - Overview](https://cybergeeks.cloud/2021/07/microsoft-sentinel-overview/) - Level: Beginner | Reading time: 10 minutes In this article, I will present an overview of Microsoft Sentinel, Microsoft's cloud SIEM. Intro Microsoft Sentinel emerged as a SIEM (Security information and event management) and SOAR (Security Orchestration, Automation, and Response) cloud solution sold as a service. This makes it much easier not only to deploy - [Using Burp Suite and FoxyProxy in Firefox](https://cybergeeks.cloud/2021/07/usando-burp-suite-e-foxyproxy-no-firefox/) - Level: Beginner | Reading time: 5 minutes In this article, I'll show you how to configure Burp Suite and FoxyProxy in Firefox. Burp Suite The Burp Suite is an integrated platform for performing security testing on web applications. You can use it as a proxy to intercept your browser sessions to any website. This can - [KQL fundamentals – Let statement](https://cybergeeks.cloud/2021/07/kql-fundamentals-let/) - Level: Beginner | Reading time: 5 minutes If you have ever had contact with any programming language, you should know a little bit about declaring variables. Let statements are used to assign a value to a variable as seen in the example below using dates: let today = endofday(now()); let yesterday = startofday(now(-1d)); Associating names with - [Microsoft Sentinel free for the first 31 days](https://cybergeeks.cloud/2022/03/microsoft-sentinel-free-for-the-first-31-days/) - Did you know that you can test Microsoft Sentinel for 31 days, being able to ingest up to 10 GB/day? When you enable a new Log Analytics workspace you can ingest up to 10 GB/day of log data for the first 31-days at no cost. It's considered a new workspace when is less than 3 days - [Microsoft Sentinel - Ingestion x Retention Costs - Part I](https://cybergeeks.cloud/2022/03/microsoft-sentinel-ingestion-x-retention/) - A common question I have been getting and also a tricky topic is related to Microsoft Sentinel costs when it comes to Retention x Ingestion. We have more costs involved on this topic and it's not my goal to explain here all the details but I wanted to explain the most frequent questions I've been - [Sentinel data retention - extend to 90 days](https://cybergeeks.cloud/2022/03/sentinel-data-retention-extend-to-90-days/) - Level: Beginner | Reading time: 5 minutes Microsoft Sentinel offers some data retention configurations that can help you to retain important logs for further investigation. It's important to understand the benefits you have when it comes to data retention and ingestion, such as: The first 31 days of data ingestion are free90 days free for data retention ## Pages - [Home - Cyber Geeks](https://cybergeeks.cloud/) - [About](https://cybergeeks.cloud/about/) - Mission and Vision At CyberGeeks.cloud, our mission is to empower readers with clear, actionable cyber security insights and knowledge through simplicity and demystification, using mind maps and other resources. We aim to be the go-to source for trusted cyber security information, fostering a safer digital world for everyone by making complex concepts accessible and easy - [Learn](https://cybergeeks.cloud/learn/) - Microsoft Ninja Series Azure Network Security Ninja Microsoft Defender for Cloud Ninja Microsoft Sentinel Ninja Microsoft Sentinel Automation Ninja Microsoft 365 Defender Ninja Microsoft Cloud App Security Ninja Microsoft Defender for Endpoint Ninja Microsoft Defender for Identity Ninja Microsoft Defender for Office 365 Ninja GitHub Azure Network Security GitHub Azure Security Center GitHub - [Defender Mind Map](https://cybergeeks.cloud/mind-map/) - [Contact](https://cybergeeks.cloud/contact/) - Email: blog@cybergeeks.cloud - [Security Podcasts](https://cybergeeks.cloud/security-podcasts/) - [Zero Trust Hub](https://cybergeeks.cloud/zero-trust-hub/) - On this page, I put together several resources about Zero Trust to make it easy to access when I need to share with customers, partners, and the community. I hope it can also help you to find relevant content about this vital framework. Microsoft - Six main ZT Pillars Microsoft Zero Trust NIST Special Publication - [Blog](https://cybergeeks.cloud/blog/) - [Home - Cyber Geeks](https://cybergeeks.cloud/home-tech/) - [Home - Cyber Geeks](https://cybergeeks.cloud/home-tech/) - [ARTICLES](https://cybergeeks.cloud/articles/) - [Quem Somos](https://cybergeeks.cloud/quem-somos/) - Missão e Visão O Cyber Geeks foi idealizado pensando em ser um espaço colaborativo entre membros e entusiastas das áreas de segurança da informação, conformidade e cloud computing. Abrimos espaço para colaboradores que querem escrever e compartilhar seu conhecimento nessas áreas. Nossa visão vai além de ter o espaço colaborativo de artigos, mas queremos manter - [Quem Somos](https://cybergeeks.cloud/quem-somos/) - Missão e Visão O Cyber Geeks foi idealizado pensando em ser um espaço colaborativo entre membros e entusiastas das áreas de segurança da informação, conformidade e cloud computing. Abrimos espaço para colaboradores que querem escrever e compartilhar seu conhecimento nessas áreas. Nossa visão vai além de ter o espaço colaborativo de artigos, mas queremos manter - [Colabore com o Cyber Geeks](https://cybergeeks.cloud/colabore-com-o-cyber-geeks/) - Obrigado por chegar até aqui! Isso mostra que você quer colaborar com o Cyber Geeks. Vou explicar algumas regras para que possamos publicar as contribuições de uma forma que os leitores tenham a melhor experiência. O Cyber Geeks começou com um projeto de treinamentos online, e durante a fase piloto, após o feedback de alguns - [Cyber Geeks - Português](https://cybergeeks.cloud/cyber-geeks-portugues/) - [Recursos de Estudo](https://cybergeeks.cloud/recursos-de-estudo/) - Quer se aprofundar nos detalhes técnicos das tecnologias de segurança Microsoft? Conheça a série Ninja Training. Azure Network Security Ninja TrainingAzure Security Center Ninja TrainingAzure Sentinel Ninja TrainingMicrosoft 365 Defender Ninja TrainingMicrosoft Cloud App Security Ninja TrainingMicrosoft Defender for Endpoint Ninja TrainingMicrosoft Defender for Identity Ninja TrainingMicrosoft Defender for Office 365 Ninja Training Recursos adicionais - [Vídeos](https://cybergeeks.cloud/videos/) - Ransomware - Pagar ou não pagar? – Especialistas debatem MITRE ATT&CK® Framework - [Contato](https://cybergeeks.cloud/contact-us/) - Entre em contato com a equipe do Cyber Geeks no espaço abaixo. Fique a vontade para contribuir com críticas, sugestões, recomendações e também se você deseja escrever artigos e contribuir com a comunidade de ciber segurança. - [Política de privacidade](https://cybergeeks.cloud/privacy-policy/) - Quem somos nós? Nosso website: http://blog.cybergeeks.com.br. Privacidade Quando os visitantes deixam comentários no site, coletamos os dados mostrados no formulário de comentários, e também o endereço IP do visitante e a string do agente do usuário do navegador para ajudar na detecção de spam. Uma string anônima criada a partir do seu endereço de e-mail - [Sample Page](https://cybergeeks.cloud/sample-page/) - This is an example page. It's different from a blog post because it will stay in one place and will show up in your site navigation (in most themes). Most people start with an About page that introduces them to potential site visitors. It might say something like this: Hi there! I'm a bike messenger - [Page layout 5](https://cybergeeks.cloud/page-layout-5/) - Paraitre ai te kolbacks magasins du. Metres bruits savoir trotte oui fut art credit. Quitter pendant fut travaux. Fanatiques tu assurances si il tristement du cherissait. Devient groupes ca ah engager me carreau. Sa commandant ah le descendons instrument. Humain tenter blemir palais devenu. Remettre la sifflent de criaient prennent mourants batterie. Halte annee leaf - [Page layout 4](https://cybergeeks.cloud/page-layout-4/) - Paraitre ai te kolbacks magasins du. Metres bruits savoir trotte oui fut art credit. Quitter pendant fut travaux. Fanatiques tu assurances si il tristement du cherissait. Devient groupes ca ah engager me carreau. Sa commandant ah le descendons instrument. Humain tenter blemir palais devenu. Remettre la sifflent de criaient prennent mourants batterie. Halte annee leaf - [Page layout 3](https://cybergeeks.cloud/page-layout-3/) - Paraitre ai te kolbacks magasins du. Metres bruits savoir trotte oui fut art credit. Quitter pendant fut travaux. Fanatiques tu assurances si il tristement du cherissait. Devient groupes ca ah engager me carreau. Sa commandant ah le descendons instrument. Humain tenter blemir palais devenu. Remettre la sifflent de criaient prennent mourants batterie. Halte annee leaf - [Page Layout 2](https://cybergeeks.cloud/page-layout-2/) - Paraitre ai te kolbacks magasins du. Metres bruits savoir trotte oui fut art credit. Quitter pendant fut travaux. Fanatiques tu assurances si il tristement du cherissait. Devient groupes ca ah engager me carreau. Sa commandant ah le descendons instrument. Humain tenter blemir palais devenu. Remettre la sifflent de criaient prennent mourants batterie. Halte annee leaf - [shortcodes](https://cybergeeks.cloud/shortcodes/) - Dropcap shortcodes estibulum ante ipsum primis in faucibus orci luctus et ultrices posuere cubilia Curae; Sed ultricies eget nunc eget luctus. Sed fringilla nec urna sed commodo. Vestibulum pulvinar non dui eu cursus. Aliquam a purus quis mauris mattis lobortis in condimentum nisi. tiam tincidunt massa eget neque varius mattis sit amet at eros. Fusce - [No Sidebar Content Centered](https://cybergeeks.cloud/no-sidebar-content-centered/) - This page layout is set to No Sidebar Content Centered. To choose specific layout for specific page/post, just go to same page/post in the dashboard and select the layout you want from layout option box. Donut caramels lemon drops soufflé pastry. Bonbon toffee pie applicake sesame snaps. Danish pie danish topping oat cake halvah wafer. - [No Sidebar Full Width](https://cybergeeks.cloud/no-sidebar-full-width/) - This page has its layout set to No Sidebar Full Width. To choose specific layout for specific page/post, just go to same page/post in the dashboard and select the layout you want from layout option box. Donut caramels lemon drops soufflé pastry. Bonbon toffee pie applicake sesame snaps. Danish pie danish topping oat cake halvah - [Right Sidebar](https://cybergeeks.cloud/right-sidebar/) - This page has its layout set to Right Sidebar. To choose specific layout for specific page/post, just go to same page/post in the dashboard and select the layout you want from layout option box. Donut caramels lemon drops soufflé pastry. Bonbon toffee pie applicake sesame snaps. Danish pie danish topping oat cake halvah wafer. Toffee - [Left Sidebar](https://cybergeeks.cloud/left-sidebar/) - This page has its layout set to Left Sidebar. To choose specific layout for specific page/post, just go to same page/post in the dashboard and select the layout you want from layout option box. Donut caramels lemon drops soufflé pastry. Bonbon toffee pie applicake sesame snaps. Danish pie danish topping oat cake halvah wafer. Toffee ## Categories - [Uncategorized](https://cybergeeks.cloud/category/uncategorized/) - [FEATURED](https://cybergeeks.cloud/category/featured/) - [Não categorizado](https://cybergeeks.cloud/category/nao-categorizado/) - [Microsoft Sentinel](https://cybergeeks.cloud/category/microsoft-sentinel-2/) - [Defender for Cloud](https://cybergeeks.cloud/category/defender-for-cloud-2/) - [KQL](https://cybergeeks.cloud/category/kql-3/) - [Ethical Hacking](https://cybergeeks.cloud/category/ethical-hacking-3/) - [Defender for Cloud Apps (CASB)](https://cybergeeks.cloud/category/defender-for-cloud-apps-casb/) - [Defender for Cloud Apps (CASB)](https://cybergeeks.cloud/category/featured/defender-for-cloud-apps-casb-featured/) - [MindMaps](https://cybergeeks.cloud/category/mindmaps/) - [Threat Intelligence](https://cybergeeks.cloud/category/threat-intelligence/) - [MDTI](https://cybergeeks.cloud/category/mdti/) - [Defender for Servers](https://cybergeeks.cloud/category/defender-for-servers/) - [XDR](https://cybergeeks.cloud/category/xdr/) - [Defender for Identity (MDI)](https://cybergeeks.cloud/category/defender-for-identity-mdi/) - [MDE](https://cybergeeks.cloud/category/mde/) ## Tags - [IncidentResponse](https://cybergeeks.cloud/tag/incidentresponse/) - [featured](https://cybergeeks.cloud/tag/featured-2/) - [BurpSuite](https://cybergeeks.cloud/tag/burpsuite-2/) - [EthicalHacking](https://cybergeeks.cloud/tag/ethicalhacking-2/) - [OWASP](https://cybergeeks.cloud/tag/owasp-2/) - [Proxy](https://cybergeeks.cloud/tag/proxy-2/) - [XDR](https://cybergeeks.cloud/tag/xdr/) - [Sentinel](https://cybergeeks.cloud/tag/sentinel/) - [Sentinel4SAP](https://cybergeeks.cloud/tag/sentinel4sap/) - [Docker](https://cybergeeks.cloud/tag/docker/) - [EntraID](https://cybergeeks.cloud/tag/entraid/) - [MitM](https://cybergeeks.cloud/tag/mitm/) - [AzFunction](https://cybergeeks.cloud/tag/azfunction/)