The Curious Engineer

All blogs / Security

Microsoft Defender Experts Blog

techcommunity.microsoft.com/category/microsoft-security-product/blog/microsoft-defender-experts

SecurityMicrosoft blogsMicrosoft Tech Community

’22’23’24’25’26
Posts
85 from 4 Jan 2022 to 21 Sep 2026
Posting
monthly (15 in the last year)
Kind
company blog

2026 8

  1. Bringing Defender Experts protection and proactive hunting into focus
  2. EDR coexistence by design: A practical starting point to Defender
  3. When the shield becomes the sword: How misconfigured PAM bridges the tiering model
  4. Hunting Infostealers - Trusted Platform Abuse
  5. Hunting Infostealers - Python Stealers
  6. Hunting Infostealers - macOS Threats
  7. When Trust Becomes the Attack Vector: Analysis of the EmEditor Supply-Chain Compromise
  8. Cloud forensics: Forensic readiness and incident response in Azure Virtual Desktop

2025 22

  1. Microsoft Defender Experts Disrupt Jasper Sleet’s Insider Access Campaign
  2. Microsoft Defender Experts - S.T.A.R. Series
  3. Meet DART, the people behind Microsoft Incident Response
  4. Charting the Future of SOC: Human and AI Collaboration for Better Security
  5. Sploitlight: Hunting Beyond the Patch
  6. The invisible attack surface: hunting AI threats in Defender XDR
  7. Delivering more threat hunting insights with Microsoft Defender Experts’ newest capabilities
  8. Cloud shadows: How attackers exploit Azure’s elasticity for stealth and scale
  9. How Microsoft Defender Experts and partners like Quorum Cyber are redefining cybersecurity teamwork
  10. Cloud forensics: Why enabling Microsoft Azure Storage Account logs matters
  11. Post-breach browser abuse: a new frontier for threat actors
  12. Welcome to the Microsoft Defender Experts Ninja Hub!
  13. How Microsoft Defender Experts uses AI to cut through the noise
  14. Cloud forensics: Prepare for the worst -implement security baselines for forensic readiness in Azure
  15. Memory under siege: The silent evolution of credential theft
  16. Elevate your protection with expanded Microsoft Defender Experts coverage
  17. From social engineering to rogue VMs: The emerging tradecraft in human-directed ransomware attacks
  18. Cloud forensics: Why enabling Microsoft Azure Key Vault logs matters
  19. Microsoft Incident Response works hand-in-hand with insurers, brokers, and law firms
  20. Keys to the kingdom: RMM exploits enabling human-operated intrusions in 2024–25
  21. Choosing between Microsoft Defender Experts for Hunting and Microsoft Defender Experts for XDR
  22. Watch and learn from Microsoft security experts who reinforce your SecOps 24/7

2024 27

  1. Enhancing Threat Hunting with Microsoft Defender Experts Plugin
  2. From prevention to recovery: Microsoft Unified’s holistic cybersecurity approach
  3. Looking for a career in Incident Response? Consider the DART Infrastructure Engineer role!
  4. Phish, Click, Breach: Hunting for a Sophisticated Cyber Attack
  5. Microsoft Intern Experience - Through the eyes of DART Incident Response (IR) interns
  6. Microsoft IR Internship Blog Series, Part 1 – ‘Not what I Expected’ – Zena’s experience
  7. Microsoft IR Internship Blog Series, Part 2 – ‘Keeping it Real’ – Ataliya’s experience
  8. Microsoft IR Internship Blog Series, Part 3 – ‘Learn – Teach – Lead’ – Vadin’s experience
  9. Microsoft IR Internship Blog Series, Part 4– ‘Facing an Active Threat’ – Patro’s experience
  10. Microsoft IR Internship Blog Series, Part 5 – ‘If you care – This is for you’ - Bahula’s experience
  11. Welcome to the Microsoft Incident Response Ninja Hub
  12. Microsoft Defender Experts services are now HIPAA and ISO certified
  13. Cloud forensics: Why enabling Microsoft Azure Graph Activity logs matters
  14. Octo Tempest: Hybrid identity compromise recovery
  15. Effective strategies for conducting Mass Password Resets during cybersecurity incidents
  16. Hunting for MFA manipulations in Entra ID tenants using KQL
  17. Recover an ADCS platform from compromise
  18. A BlackByte Ransomware intrusion case study
  19. Microsoft Defender Experts Services Expanded Coverage Upcoming Preview
  20. Hunting in Azure subscriptions
  21. Strategies to monitor and prevent vulnerable driver attacks
  22. Follow the Breadcrumbs with Microsoft IR & MDI: Working Together to Fight Identity-based Attacks
  23. Hunting for QR Code AiTM Phishing and User Compromise
  24. Defender Experts’ recommendations for impactful security posture management
  25. Test your configurations and experience Defender Experts Notifications early
  26. Experience Defender Experts above the fold
  27. Security Analyst Profile: Arlette Umuhire Sangwa

2023 17

  1. Investigating malicious OAuth applications using the Unified Audit Log
  2. Security Analyst Profile: Amanda Cantero Schilling
  3. The Microsoft Security Experts Discussion Space: Your Gateway to Knowledge Sharing
  4. What’s new in Microsoft Defender Experts for XDR
  5. Service Delivery Manager Profile: Meiko Lopez
  6. Service Delivery Manager Profile: Sachin Kumar
  7. Catch Defender Experts for XDR on the Ninja Show
  8. A day in the life of a Defender Experts for XDR analyst
  9. The Vital Role of a Service Delivery Manager: Your Defender Experts for XDR Trusted Advisor
  10. Get incident updates from Defender Experts for XDR in the SOC tools you use
  11. Defender Experts Chronicles: A Deep Dive into Storm-0867
  12. Strategies for securing identities in Azure Active Directory with Sean Metcalf
  13. Visit Microsoft Security Experts at the RSA Conference 2023
  14. Fuzzy hashing logs to find malicious activity
  15. Catch Defender Experts for Hunting on the Ninja Show
  16. Total Identity Compromise: Microsoft Incident Response lessons on securing Active Directory
  17. Good UAL Hunting

2022 11

  1. NEW SERIES: Security Experts Roundtable coming January 25, 2023
  2. ​​How to Set Security Budget and Controls to Identify Threats Faster
  3. Microsoft Defender Experts for XDR now in preview
  4. Using Microsoft Security APIs for Incident Response - Part 2
  5. Forensic artifacts in Office 365 and where to find them
  6. Industry Expert Series: What keeps an AppSec CTO up at night?
  7. Industry Expert Series: Wireless Security- How to Better Protect Devices and Networks
  8. Using Microsoft Security APIs for Incident Response - Part 1
  9. Part 2: LockBit 2.0 ransomware bugs and database recovery attempts
  10. Part 1: LockBit 2.0 ransomware bugs and database recovery attempts
  11. Leveraging the Power of KQL in Incident Response