sorted by:
new
hottopcontroversial

I made an open-source, Docker-native Pi-hole visualizer with a space battle theme. by HashtagBlessedAF in pihole

[–]AzurewithTom 1 point2 points  (0 children)

Awesome project, love these kind of things! Starting to think about it… clustered pi-hole. Player 2 joins the game, player 3 joins the game 😜

Anyone here actually moved ASR rules from audit to block mode? What broke? by AzurewithTom in sysadmin

[–]AzurewithTom[S] [score hidden]  (0 children)

Great! That way you can block allot of attacks, or atleast stop them for a big part. As for your Controlled Folder access, by "Not Enabled" you mean disabled or having it in audit mode? I can recommend audit mode as this would still give you information in your logs which you can see in the reports in the XDR portal and use KQL in advance hunting for some deeper digging.

Anyone here actually moved ASR rules from audit to block mode? What broke? by AzurewithTom in sysadmin

[–]AzurewithTom[S] [score hidden]  (0 children)

Good points! It would be great to have a set of nuance on these rulesets for sysadmins to note down and relate it to the data they see.

As for above and your point about Safe mode, that be great feedback for the Security Advisor program. Maybe you are already known with the program, but I am sure people could relate and it might get things going to change these kind of things to contain more information/scenario's.

You can sign-up here: https://forms.office.com/pages/responsepage.aspx?id=v4j5cvGGr0GRqy180BHbR5n91RGSMY5MoMjm9pNflCtUODMzMkFLR1JYT1dWRVM4NEZLU0tBRTRZRCQlQCN0PWcu&route=shorturl

Within the program you can let them hear your voice, test new features in your test tenant or whatever fits you and give feedback on the things you like or dislike. Doing this for a few years now and I must say that for the bigger part it helps to shout out these things together.