Articles
Technical write-ups on Microsoft Security. The original posts live on weiszmann.blog, and every entry here links straight to it.
2026
-
Microsoft Defender for Endpoint – Onboarding with Intune Part 4 (on weiszmann.blog)
Onboarding Intune-managed Windows devices with an endpoint detection and response policy: no scripts or onboarding packages to maintain, and every new device in the target group is onboarded automatically.
-
Microsoft is moving beyond SMS-based MFA: Passkeys become the default authentication experience in Entra ID (on weiszmann.blog)
Why SMS-based MFA no longer counts as phishing-resistant, and what Microsoft's shift to passkeys as the default authentication experience in Entra ID changes.
-
Microsoft Defender for Endpoint – Permission Model Part 3 (on weiszmann.blog)
How access to Defender for Endpoint is managed, and the permission approaches that let administrators and SOC team members work in the service.
-
Microsoft Defender for Endpoint – Defender for Endpoint configuration Part 2 (on weiszmann.blog)
The prerequisites and basic configuration options to work through before Defender for Endpoint is ready to use in a new tenant.
-
Microsoft Defender for Endpoint – An Overview of Architecture, Capabilities, and the Ecosystem Part 1 (on weiszmann.blog)
Defender for Endpoint as a platform rather than a single product: its architecture, its prevention, detection and response capabilities, and where it fits in the wider ecosystem.
-
Microsoft Defender XDR Deep Dive – Advanced Hunting and the Telemetry Architecture – Part 2 (on weiszmann.blog)
Building on the cross-domain correlation from Part 1: how the telemetry behind Defender XDR is structured, and how Advanced Hunting works on top of it.
-
Microsoft Defender XDR Deep Dive – Part 1 (on weiszmann.blog)
How Defender XDR processes endpoint, identity, email, SaaS and cloud telemetry together, so isolated events can be read as one coherent attack.
-
Getting Real Value from Microsoft Entra Licenses with License Usage Insights (on weiszmann.blog)
Licensing is usually something you review at renewal time. Using License Usage Insights to treat it as a strategic question instead.
-
Microsoft Sentinel Custom Graphs (on weiszmann.blog)
Tabular, log-based SIEM analysis still works, but it has a structural limit. Custom graphs in Microsoft Sentinel and the move to relationship-based security analytics.
-
Password Protection in Microsoft Defender – Reducing Identity Risk at the Source (on weiszmann.blog)
Most attacks don't begin with a clever exploit but with a weak or reused password. How password protection cuts that identity risk off early.
-
Microsoft Entra Backup & Recovery Explained (on weiszmann.blog)
Every sign-in and access decision flows through Entra ID, so its configuration state needs protecting like any other critical system. Backup and recovery for identity in the cloud.
-
Identity Is the New Perimeter (on weiszmann.blog)
The network you controlled, the data center, the clear boundaries: why that model stopped working, and why identity became the place security decisions are made.
-
Microsoft Entra Deep Dive (on weiszmann.blog)
Microsoft Entra as a unified identity and network access solution, with a focus on identity security and Zero Trust access control.
No articles match that search. Try a product name such as “Sentinel”, or .