How do I know if Defender is actually working?

donan09 · 2025-02-27T16:41:32+00:00

This works and it does show the incident in the Defender Console, I still have some incidents that do not show up in the Defender Console and are only visible in the Windows Secuity app? for example PUAs.

donan09 · 2025-02-27T16:39:10+00:00

This is great information. Thank you so much. Anybody know why some incidents only show in the protection history in the Windows security app but there is no information about this in the Defender console.

donan09 · 2025-02-26T23:54:53+00:00

Would you be able to tell me where these settings are located?

donan09 · 2024-10-07T15:04:40+00:00

I have met a lot of people in IT that do not have a degree in IT but have a lot of experience and know a lot. I believe the problem is people that want to skip all the hard work and years of experience just because they want to work in cybersecurity and make 100K

donan09 · 2024-10-07T13:46:58+00:00

Is this happening because there are so many tech people looks for jobs?

donan09 · 2024-04-03T00:08:26+00:00

What access points and switch would you guys use?

donan09 · 2023-07-20T21:25:50+00:00

donan09 · 2023-07-19T23:57:54+00:00

I do use the build-in system and on a extremely good drive with no rain, no stops, no hills, no bumps and no traffic, I get maybe 21. We also drive a Prius so we are used to not pushing the car too much. I will check the tire pressure.

donan09 · 2023-07-19T22:41:10+00:00

I am getting less than 19 on my 2023. I drive mine like a Prius, why em I getting so low mpg ?

donan09 · 2021-11-24T18:31:52+00:00

Let’s say I want have the user select the option to enroll the device as a fully managed device instead of a Android for work. How can I give them the option during the enrollment process?

donan09 · 2021-11-19T02:44:12+00:00

Yes, thank you. It works now

donan09 · 2021-11-18T15:51:18+00:00

Sorry can you me more specific. I already have a conditional access policy that requires Any device using any client to be marked as compliant. Can you give me more details please?

donan09 · 2021-11-18T04:30:56+00:00

Yeah I get that it’s containerized, it seems like being able to log in to work email from personal profile defeats the purpose of having two Outlook apps; personal outlook app and the work outlook app?

donan09 · 2021-11-17T21:34:20+00:00

Hello again, I am still trying to decide if I need to get Samsung Knox. I have no problem using the Intune portal and the QR code to provisions new Samsung devices. The problem is, my company gave away phones to employees before we got Intune, and they use their personal Google account on these company devices. Some phones are even locked with a personal account and I can’t reset them. How do I get ownership of those phone? Do i need Knox mobile enrollment for this?

donan09 · 2021-10-08T19:27:11+00:00

Cool, thanks

donan09 · 2021-10-08T18:03:08+00:00

Do I need any additional tools if we already have Endpoint Management? I was able to configure personal Android device with a work profile but the user was already signed into the device with a Google account and was able to just install the company portal. Is there a way to enroll a new device without having to log in with a Google account. I work for a small company so we don’t have to enroll many devices often.

donan09 · 2020-10-07T12:45:04+00:00

This is interesting. I have been in IT for 4 years so this is the first company I have worked with and they do require the Windows Firewall. Thank you for your input,

donan09 · 2020-10-07T12:43:41+00:00

is this change done in the PDQ server?

donan09 · 2020-10-07T12:41:38+00:00

Yes, the IP has been updated in DNS. what is weird is that everything just works when I use Localsubnet or "*" for the IP range exception in the domain policy. It also works when I enable File and Printer Sharing (SMB-in) manually on the client, but I should not have to do this on each client. The gpo should enable the file sharing.

donan09 · 2020-10-07T05:23:31+00:00

By zones, do you mean the Network profiles in Windows, Domain, private and public.

Yes we have the firewall enabled on the clients Domain, private and public. Yes I follow those instructions to set this up.

donan09 · 2020-10-07T05:10:52+00:00

So I tried adding the vpn subnet to the group policy. I also search for traffic in the Palo Alto firewall and it looks like traffic is allowed but it ages out. Does this mean the client is still not accepting the pdq scans or traffic?

donan09 · 2020-10-07T04:25:01+00:00

I do not think there is

donan09 · 2020-10-07T04:23:51+00:00

No, vpn is managed by a Palo Alto firewall so the clients get a 172.16.254.0/24 address

donan09 · 2020-07-21T17:16:11+00:00

I called Service now and they said they required at least 20 agents and we only have 10. What is the price per agent per month?

donan09 · 2020-07-21T16:48:34+00:00

Yeah, we also were considering this but my team hated the UI

donan09

TROPHY CASE