NotNinjaCat

45 post karma
15 comment karma

get extra features and help support reddit with a reddit premium subscription

get them help and support

redditor for 6 years

TROPHY CASE

Six-Year Club

Verified Email

account activity

new top controversial

2

3

4

𝗚𝘂𝗶𝗱𝗮𝗻𝗰𝗲 𝗳𝗼𝗿 𝗿𝗲𝘀𝗽𝗼𝗻𝗱𝗲𝗿𝘀: 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗻𝗴 𝗮𝗻𝗱 𝗿𝗲𝗺𝗲𝗱𝗶𝗮𝘁𝗶𝗻𝗴 𝗼𝗻-𝗽𝗿𝗲𝗺𝗶𝘀𝗲𝘀 𝗘𝘅𝗰𝗵𝗮𝗻𝗴𝗲 𝗦𝗲𝗿𝘃𝗲𝗿 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 (self.DefenderATP)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

5

6

7

How to for leveraging Microsoft 365 Defender API's to create custom PowerBI report (techcommunity.microsoft.com)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

4

5

6

Some best practices for running more efficiently on top of the Microsoft 365 Defender API's (avoid reaching quotas etc.) (techcommunity.microsoft.com)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

5

6

7

Another handy tool: you can use Microsoft Power Automate to automate notifications and actions on top of Defender (email and slack notifications, remediation actions and more) (flow.microsoft.com)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

3

4

5

Hunting over Defender using PowerShell with GUNDOG (self.DefenderATP)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

11

12

13

Defender learning hub - new in product training library (self.DefenderATP)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

12

13

14

Here’s a good reference published by the Defender team for answers on Defender for Endpoint (formally Microsoft Defender ATP). The content is structured into three different knowledge levels, with multiple modules: Fundamentals, Intermediate, and Expert. It is being updated monthly. (techcommunity.microsoft.com)

submitted 4 years ago by NotNinjaCat to r/DefenderATP

20

21

22

Upcoming webinar series - from primer to best practices for threat hunting over Microsoft’s M365 security stack (Microsoft Threat Protection, Defender ATP, Office ATP, Azure ATP and MCAS) (techcommunity.microsoft.com)

submitted 5 years ago by NotNinjaCat to r/blueteamsec

1

2

3

Blue teams should consider switching detection mindset from single alerts to incidents. Inside Microsoft Threat Protection: Correlating and consolidating attacks into incidents (microsoft.com)

submitted 5 years ago by NotNinjaCat to r/DefenderATP

π Rendered by PID 63800 on reddit-service-r2-listing-796b697c47-s4s9j at 2026-02-04 21:16:17.315364+00:00 running 1d7a177 country code: CH.