Webinar Replay – Getting the Most Value From Your Microsoft E3/E5 Security Products (and Minimizing Costly Pitfalls)

Name: Webinar Replay – Getting the Most Value From Your Microsoft E3/E5 Security Products (and Minimizing Costly Pitfalls)
Start: 2023-05-24

May 24, 2023

Maximizing Microsoft E3/E5 Security Solutions

Watch the webinar replay here.

As organizations continue to move business operations to the cloud, security teams are considering native security tools within Microsoft’s suite, such as Microsoft Sentinel, Microsoft 365 Defender and Defender for Cloud. However, Microsoft’s cost structure can be complex, and organizations often struggle to get the most from their investments, running into pitfalls that can be easily overlooked during the buying cycle and even after implementation.

Watch Kroll Cyber Risk experts Scott Hanson, Thomas Hind and Rafael De Lima share key steps you can take to leverage Microsoft E3/E5 security solutions more effectively and securely.

This webinar covers:

The security technologies to prioritize from your E5/Microsoft Defender license
Tuning Microsoft-specific detections and playbooks in line with your threat landscape
The most effective ways to integrate Microsoft Defender products and Microsoft Sentinel
Key steps to incorporate threat intelligence and DFIR principles into your response actions

You can also download the slide deck here.

Kroll is a proud member of MISA and a Microsoft Solutions Partner for Security

Key Questions Asked During the Session

We recommend to focus on typical areas of attack (endpoint, identity and email), but to also consider products that are cost-effective and require lower effort to implement. We’d therefore recommend prioritizing the following:

Defender for Endpoint: Provides unparalleled visibility into activity on endpoints as well as the ability to actually go in and enact change, in response to security incidents, either through manual work, or as part of automated response.
Defender for Identity/Azure Active Directory: Adds the additional context of user activity not just in the endpoint, but also as they interact with the wider Office365 environment. With Azure Active directory, organizations can have a central identity and authentication source across multiple third party SaaS environments.
Defender for Office 365: Microsoft’s own recommendation is to use the pre-set policies as much as possible. Enabling Defender for Office365 provides protection against threat vectors such as email, shared links, attachments or even through collaboration tools like SharePoint, Teams and Outlook.

Stay Ahead with Kroll

Cyber and Data Resilience

Incident response, digital forensics, breach notification, security strategy, managed security services, discovery solutions, security transformation.

Cyber and Data Resilience

Kroll Responder MDR

Stop cyberattacks. Kroll Responder managed detection and response is fueled by seasoned IR experts and frontline threat intelligence to deliver unrivaled response.

Kroll Responder MDR

Kroll Responder MDR for Microsoft Security

Kroll Responder managed detection and response for Microsoft delivers enriched telemetry, frontline threat intelligence and Complete Response capabilities to maximize the value of your native endpoint and cloud technology.

24x7 Incident Response

Kroll is the largest global IR provider with experienced responders who can handle the entire security incident lifecycle.

24x7 Incident Response

Threat Exposure and Validation

Proactively identify your highest-risk exposures and address key gaps in your security posture. As the No. 1 Incident Response provider, Kroll leverages frontline intelligence from 3000+ IR cases a year with adversary intel from deep and dark web sources to discover unknown exposures and validate defenses.

Threat Exposure and Validation

Office 365 Security, Forensics and Incident Response

Digital forensic experts investigate hundreds of Office 365 incidents per year and help strengthen your security.

Office 365 Security, Forensics and Incident Response

Kroll is headquartered in New York with offices around the world.

One World Trade Center

285 Fulton Street, 31st Floor

New York NY 10007

Global

Return to top

Webinar Replay – Getting the Most Value From Your Microsoft E3/E5 Security Products (and Minimizing Costly Pitfalls)

Key Questions Asked During the Session

What is a cyber attack?

What sort of incidents are you dealing with that involve Sharepoint data exfiltration, and what's a good way to detect them?

Is there a recommended SOAR platform to use with Sentinel and Defender?

Is it possible to get high-accuracy detections without massive data ingestion costs from Microsoft?

Cyber and Data Resilience

Kroll Responder MDR

Kroll Responder MDR for Microsoft Security

24x7 Incident Response

Threat Exposure and Validation

Office 365 Security, Forensics and Incident Response

Kroll is headquartered in New York with offices around the world.