Solution Savy
All series Back to Security Hub

SERIES · BY MUHAMMAD AHSAN

Microsoft Defender Deep Dive

Ten practical parts on detecting, investigating and stopping threats across email, endpoints, identities and cloud with Microsoft Defender.

3 of 10 published30%

PUBLISHED

Microsoft Defender series cover in Solution Savy bluePart 1

Microsoft Defender Deep Dive, Part 1: Defender XDR — the unified portal and incident queue

Learn how the Microsoft Defender portal brings security signals into a shared investigation workflow, and how to turn its incident queue into a disciplined triage process. This first instalment covers access, prioritisation, investigation, response and a practical KQL baseline.

9 min readRead
Microsoft Defender series cover in Solution Savy bluePart 2

Microsoft Defender Deep Dive, Part 2: Safe Links and Safe Attachments

Configure Microsoft Defender for Office 365 Safe Links and Safe Attachments with clear policy scope, controlled exceptions and practical validation. Understand how URL protection and attachment analysis work together—and where administrators still need to investigate.

9 min readRead
Microsoft Defender series cover in Solution Savy bluePart 3

Microsoft Defender Deep Dive, Part 3: Attack Simulation Training — Running Phishing Campaigns

Use Attack simulation training in Microsoft Defender for Office 365 to run controlled phishing exercises, assign relevant training and measure improvement. This guide covers permissions, campaign design, launch checks and responsible interpretation of results.

9 min readRead

ROADMAP

Coming next in the series

  1. 4
    COMING SOON

    Defender for Endpoint: onboarding and attack surface reduction rules

  2. 5
    COMING SOON

    Defender for Endpoint: EDR, live response and automated investigation

  3. 6
    COMING SOON

    Defender for Identity: detecting on-premises AD attacks

  4. 7
    COMING SOON

    Defender for Cloud Apps: shadow IT and session control

  5. 8
    COMING SOON

    Defender for Cloud: Azure posture and Secure Score

  6. 9
    COMING SOON

    Advanced Hunting with KQL: first queries that matter

  7. 10
    COMING SOON

    Defender Vulnerability Management: prioritising remediation

Planning a Microsoft 365 or security project?

Talk to Solution Savy about architecture, migrations and security hardening.

Book a consultation