cat articles/
Blog
Technical articles on cybersecurity, privacy and digital governance. Straightforward, without unnecessary jargon.
Microsoft Defender MITRE ATT&CK on Microsoft 365
I explored the Microsoft 365 Defender portal and its cloud-native MITRE ATT&CK coverage: unified XDR, Defender for Office 365, MDE, and Cloud Apps in a single pane of glass.
How Microsoft Defender Detects MITRE ATT&CK Techniques
Microsoft Defender XDR, Defender for Identity, and Defender for Endpoint each map to specific MITRE ATT&CK tactics. This article breaks down the coverage per product — from lateral movement detection in Active Directory to process injection alerts on endpoints — with actionable recommendations for security teams.
Introduction to MITRE ATT&CK: the map of cyber attacks
MITRE ATT&CK is the reference framework for understanding how attackers operate. Discover the 14 Enterprise tactics and how to use them for defense.