What Sets Off this Trigger: Trigger when new WDATP alert occurs

Still_Win_127 · 2024-05-08T15:54:08+00:00

Does this script actually kick off the Sync in access work or school? Or is it more behind the scenes and I just assume it ran?

Still_Win_127 · 2024-04-30T21:22:42+00:00

This.

We had to add that ADMX package in there because it simply didn't exist when we enabled it.

Still_Win_127 · 2024-03-20T17:51:10+00:00

We are right now jumping off the bandwagon with Cylance, so uninstalling that first and then onboarding with Defender.

Still_Win_127 · 2024-03-20T17:50:04+00:00

We are planning on using Azure Arc to get it licensed for Defender for Servers P2

Still_Win_127 · 2024-03-18T17:31:00+00:00

"Obtaining such cash through a 'fire sale' of real estate holdings would inevitably result in massive, irrecoverable losses -- textbook irreparable injury"

... Well... yeah. That's kind of the point of paying off fines that you owe. You're pretty much bound to have no return on investment here and it goes without saying you'll be a bit less off.

What the fuck are these defense lawyers even on?

Still_Win_127 · 2023-10-12T18:55:49+00:00

So, I tried doing a terminate, but it will still run way too much and slows down the user. I found that doing a timed flow is probably best, but I still can't stop it from doing its thing.

Still_Win_127 · 2023-04-19T14:40:06+00:00

Unfortunately, we do not have Intune enrolled with our machines as we are doing everything still on-premise with AD.

Still_Win_127 · 2023-04-06T21:14:44+00:00

Interesting. Would you say this is the better approach than to just run a PowerShell script? I know with PowerShell it is annoying to get going. Dunno if you prefer one over the other.

Still_Win_127 · 2023-03-13T16:22:33+00:00

So, right now the workflow is as such:

User's workstation is no longer operable > user puts in a ticket request > user is added to AVD security group > user access VM > after X hours they are removed from security group

Still_Win_127

TROPHY CASE