Articles

2026

• Oct 11

  Microsoft Defender for Endpoint – Onboarding with Intune Part 4

  Onboarding Intune-managed Windows devices with an endpoint detection and response policy: no scripts or onboarding packages to maintain, and every new device in the target group is onboarded automatically.

  Defender for Endpoint Part 4 of the Microsoft Defender for Endpoint series 6 min read

• Jul 19

  Microsoft is moving beyond SMS-based MFA: Passkeys become the default authentication experience in Entra ID

  Why SMS-based MFA no longer counts as phishing-resistant, and what Microsoft's shift to passkeys as the default authentication experience in Entra ID changes.

  Entra ID Also in Hungarian 3 min read

• Jun 21

  Microsoft Defender for Endpoint – Permission Model Part 3

  How access to Defender for Endpoint is managed, and the permission approaches that let administrators and SOC team members work in the service.

  Defender for Endpoint Part 3 of the Microsoft Defender for Endpoint series 6 min read

• Jun 14

  Microsoft Defender for Endpoint – Defender for Endpoint configuration Part 2

  The prerequisites and basic configuration options to work through before Defender for Endpoint is ready to use in a new tenant.

  Defender for Endpoint Part 2 of the Microsoft Defender for Endpoint series 9 min read

• Jun 4

  Microsoft Defender for Endpoint – An Overview of Architecture, Capabilities, and the Ecosystem Part 1

  Defender for Endpoint as a platform rather than a single product: its architecture, its prevention, detection and response capabilities, and where it fits in the wider ecosystem.

  Defender for Endpoint Part 1 of the Microsoft Defender for Endpoint series Also in Hungarian 4 min read

• May 10

  Microsoft Defender XDR Deep Dive – Advanced Hunting and the Telemetry Architecture – Part 2

  Building on the cross-domain correlation from Part 1: how the telemetry behind Defender XDR is structured, and how Advanced Hunting works on top of it.

  Defender XDRKQL Part 2 of the Microsoft Defender XDR Deep Dive series Also in Hungarian 5 min read

• May 5

  Microsoft Defender XDR Deep Dive – Part 1

  How Defender XDR processes endpoint, identity, email, SaaS and cloud telemetry together, so isolated events can be read as one coherent attack.

  Defender XDR Part 1 of the Microsoft Defender XDR Deep Dive series 6 min read

• Apr 22

  Getting Real Value from Microsoft Entra Licenses with License Usage Insights

  Licensing is usually something you review at renewal time. Using License Usage Insights to treat it as a strategic question instead.

  Entra ID 3 min read

• Apr 15

  Microsoft Sentinel Custom Graphs

  Tabular, log-based SIEM analysis still works, but it has a structural limit. Custom graphs in Microsoft Sentinel and the move to relationship-based security analytics.

  Sentinel 4 min read

• Mar 31

  Password Protection in Microsoft Defender – Reducing Identity Risk at the Source

  Most attacks don't begin with a clever exploit but with a weak or reused password. How password protection cuts that identity risk off early.

  Entra IDDefender XDR 3 min read

• Mar 22

  Microsoft Entra Backup & Recovery Explained

  Every sign-in and access decision flows through Entra ID, so its configuration state needs protecting like any other critical system. Backup and recovery for identity in the cloud.

  Entra ID 4 min read

• Mar 19

  Identity Is the New Perimeter

  The network you controlled, the data center, the clear boundaries: why that model stopped working, and why identity became the place security decisions are made.

  ArchitectureEntra ID 5 min read

• Mar 9

  Microsoft Entra Deep Dive

  Microsoft Entra as a unified identity and network access solution, with a focus on identity security and Zero Trust access control.

  Entra IDArchitecture 10 min read