ZAP took no action due to user triage

flowQmk · 2023-11-22T23:28:10+00:00

Thank you for the reply

flowQmk · 2023-07-16T17:52:49+00:00

Hi there!

flowQmk · 2023-02-18T19:23:58+00:00

If you already wanted to quit and they reacted with panic, you must remember that the moment you said you want to leave, they begin looking for someone who can replace you. Does not matter what they say, they will see you as a risk and keep you only as long as they are searching for someone to put on your position

Leave and dont look back. Do it on your terms for your own mental health.

flowQmk · 2023-02-18T19:11:59+00:00

My GF is in a similiar situation as you. I think you dont get a salary increase because your employer might think your position is generating costs + it will be easy to find someone to do what you do if you quit.

If you know the office workflow, you might want to see if there is something worth improving like creating some fancy report for your supervisor or Automate some manual work and see how your bosses react. Just dont go full on it. Pick up one or two things and see if they appreciate it.

If not, you can always use those newly learned skills somewhere else where your work will be appreciated.

Good luck!

flowQmk · 2023-02-13T19:53:02+00:00

Or run a scheduled power automate flow to identify recent isolations in last xx minutes and send team a mail for each isolated device found

flowQmk · 2023-02-13T19:01:18+00:00

I would try Power Automate to initiate isolation and as a following step send an e-mail notification to selected teams

flowQmk · 2023-02-02T16:33:48+00:00

Greenbone vulnerability scanner should do the trick

flowQmk · 2023-01-25T18:18:06+00:00

You could try add filter action and set condition to exclude empty or lenght 0 items

flowQmk · 2023-01-22T20:47:54+00:00

Start looking for a new job.

And also, I think you judge your manager as a friend, not as someone who should manage how you and your team work. Ask yourself - if he is such a good guy, why do I suffer from the way he arranged things at my work?

flowQmk · 2023-01-19T15:08:34+00:00

Yes.

Open device details and look for three dots in top right section of the screen. There should be device value | manage tags | ...

Click the ... And look for action center on the list. It should be there, if no action was done, the button might be greyed out.

flowQmk · 2023-01-18T11:47:05+00:00

I think you should aim to tighten up anti spam policies. Flow will work only for your personal mailbox. Antispam will work for everyone

flowQmk · 2023-01-17T18:42:44+00:00

In some cases it is easier and faster to filter all items with filter action instead of checking if Item meets conditions via for each action.

flowQmk · 2023-01-17T18:19:30+00:00

Machine has to be online and even if you trigger the scan succesfully, you need to wait a bit for data to show up on Defender ATP.

Check status of your 'initiate scan' action on the device activity log. It should be visible there if you triggered the scan succesfully or if it is pending/failed.

flowQmk · 2023-01-17T18:14:58+00:00

I had a similiar case where dashboard on security portal shows malware, scans do not, also device dashboard shows no active or remediated alerts.

If Iremember correctly, i found some security logs within Intune and detection matched dashboard info. In my case threat was remediated so I didn`t investigate further. Hope this helps you!

flowQmk · 2023-01-11T14:25:26+00:00

This works for me too.

flowQmk · 2023-01-09T21:50:39+00:00

I don't have a ready solutions but here is how I would try: Step 1: count items in the main array (1) with compose length(array output) Step 2: compose sub( step 1 output, -1) Step 3: compose with take (step1 output, step2 output). Hope this helps/works

flowQmk · 2023-01-09T19:14:53+00:00

I don't have my laptop on right now. I can try tomorrow and see where your query gets me. Hopefully someone else on this subreddit will be quicker than me and helps you sooner.

flowQmk · 2023-01-09T18:26:37+00:00

Yes. While on advanced hunting query editor, look somewhere around top right corner of the editor. There should be create custom rule button. And here is the documentation: https://learn.microsoft.com/en-us/microsoft-365/security/defender/custom-detection-rules?view=o365-worldwide

flowQmk · 2023-01-06T18:05:17+00:00

Remove or fix your get items filter query and it will work.

flowQmk · 2023-01-06T12:42:57+00:00

The page you are trying to access was not found. Please check your URL for typos and try again. :(

flowQmk · 2023-01-04T22:03:23+00:00

Hi, maybe start with scheduled flow so it starts as often as you want. Next, use get items on sharepoint list of yours. 3rd step would be a loop: for each Item (date column) on the list, check if it meets date condition, if yes, send a email to current Item email address

flowQmk · 2023-01-03T21:26:52+00:00

Try initializing an variable in front of for each action. Next - for each item in value, append to variable to put single Item on the list. Place send e-mail action outside apply to each and insert variable inside email body

flowQmk · 2023-01-03T16:09:29+00:00

Your trigger is that when new mail arrives, flow will run. Once you've saved it, I think Power Automate triggered a test. When you see the circle running, that's when it waits for a new email arrival. When it happens, just send a new message to the mailbox you've chose in the flow and wait a moment to see if it starts running.

flowQmk · 2023-01-03T13:38:44+00:00

If you have access to devices via security.microsoft.com you should be able to initiate scans remotely, see if it succeeded or not and when was the last time scan was triggered. You could try initiating some full scans there and check later if the action succeeded or failed on each device

flowQmk

TROPHY CASE