Using AbuseIPDB in Microsoft Sentinel for IP Reputation and Threat Enrichment.
Enhance Microsoft Sentinel with AbuseIPDB to enrich incidents, assess IP reputation, and automate threat response using playbooks.
Command Palette
Search for a command to run...
Comments
Join the discussionNo comments yet. Be the first to comment.
Microsoft
Part 2 of 9
Restoring Microsoft 365 Defender Features with Enhanced Filtering for Connectors (EFC)
Introduction Many organisations integrate Microsoft 365 with third-party email security gateways to enhance threat protection, continuity, and encryption. However, routing email through a secure email gateway (SEG) can unintentionally disrupt native ...
More from this blog
Immich Deployment on Windows Server Using Docker, WSL, and SMB-Based Persistent Storage
Designing a Resilient Linux Application Stack on Windows Infrastructure.
Feb 22, 202615 min read77
ClickFix Forensics: Proving Execution Beyond the Browser
A deep dive on ClickFix, mapping fake CAPTCHA lures to endpoint code execution, covering investigation, response, and preventative controls.
Dec 21, 20257 min read39
LAPS: The Local Administrator Password Solution For Windows Devices In Entra ID.
Overview. Prerequisites. Join types. LAPS is only supported on: Microsoft Entra joined devices. Microsoft Entra hybrid joined devices. Microsoft Entra registered devices are not supported. License requirements. LAPS is available to all customers ...
Nov 30, 20252 min read72
SOC Casefile: Microsoft 365 Account Compromise Investigation.
A complete analysis of a compromised identity in Microsoft 365, covering key tactics, techniques, and procedures.
Nov 30, 20251 min read12
Deploying Level RMM Using A Microsoft Intune Platform Script.
Streamlining Level RMM deployment across Windows devices using PowerShell and a Microsoft Intune deployment script.
Nov 30, 20253 min read20
Ciaran Doherty's SecOps Blog
24 posts