Stefan Ringler

Technical Specialist - Security | @Microsoft #MSFT #MCT

[Stefan Ringler @ringlerstefan]

@rodtrent JIT is for sure one of the options you should use, I just deleted the public IP and use bastion instead. was just a simple configmgr lab I didn't even realized that it's still running ;) but that's the point

[Stefan Ringler @ringlerstefan]

pfhhh, it's just a demo environment...but do I use common credentials in it 🤔maybe it's a good idea to secure ALL environments. #MicrosoftDefender #MicrosoftSentinel #MicrosoftSecurity
https://t.co/DHw2hoKrrG

[Stefan Ringler @ringlerstefan]

our new MITRE blade in Microsoft Sentinel is in public preview helping you understand your organization's security coverage, based on the tactics and techniques from the MITRE ATT&CK framework.
https://t.co/x1qkkY56p3
#SIEM #MicrosoftSentinel #MITRE https://t.co/MpAWhavM8u

[Stefan Ringler @ringlerstefan]

Want to learn more about our new exciting data ingestion/retention preview features in Microsoft Sentinel announced yesterday? Check this out 👇
#MicrosoftSentinel #MicrosoftSecurity #SIEM https://t.co/aKQqIftmE6

[Stefan Ringler @ringlerstefan]

Run playbooks on-demand as part of incident investigation and response
#MicrosoftSentinel #SOAR #MicrosoftSecurity https://t.co/0WaXNZQ3T9

[Stefan Ringler @ringlerstefan]

new data retention tiers, ingestion transformation and a lot more awesomeness. Be sure to check out the latest innovations in Microsoft Sentinel 👇🏻
#mustread #SIEM #MicrosoftSentinel #MicrosoftSecurity https://t.co/2H2ZjZcd2T

[Stefan Ringler @ringlerstefan]

Learn how you can use the new classification capabilities in Microsoft 365 Defender #XDR #MicrosoftDefender #MicrosoftSecurity https://t.co/bTILyqi7TS

[Aura @SecurityAura]

I'm curious... for people who uses cloud-based EDRs (CrowdStrike, SentinelOne, etc.). What do you think about Carbon Black Cloud scheduled maintenances?

Your EDR is basically non-usable for 8 hours. There's no telemetry coming in, you cannot quarantine endpoints, etc.

[Stefan Ringler @ringlerstefan]

@MrWyss Computer says no 😜

[Stefan Ringler @ringlerstefan]

How your logs from Log Analytics workspace can easily be migrated into long-term storage using Azure Data Explorer (ADX) to comply with retention standards
#AzureSentinel https://t.co/0wLXBv4sQx

[Stefan Ringler @ringlerstefan]

@d0m3l Thank you so much for your outstanding community efforts and inspiring sessions - you’ll definitely be missed here!

[Claus Jespersen @claus_jespersen]

Lots of updates to my #AzureAD #ConditionalAccess guidance. Changes include
- CA Deployment Model
- CA Automation example using Azure DevOps
- Multiple #ZeroTrust related changes https://t.co/6v4ExCnLcC

[Stefan Ringler @ringlerstefan]

Included features in Microsoft Defender for Endpoint P1
#MicrosoftDefender #MDE #MicrosoftSecurity
https://t.co/p8aPzrqIPM

[Stefan Ringler @ringlerstefan]

@wpninjasummit @rodtrent All the best for your family @rodtrent 🤞🏼- great session btw!

[JoN @Jon4Tweet]

Hi #MEMCM #MECM #SCCM #ConfigMgr community. Check out the updated version of my update compliance report solution. Hope you like it. https://t.co/3Jk2WhgNvG

[Stefan Ringler @ringlerstefan]

Why tamper protection is so critical in helping to protect against ransomware #MDE #MicrosoftSecurity https://t.co/DPYEvjToDr

[Microsoft SIEM and XDR @MSThreatProtect]

We're excited to share that Microsoft Defender for Endpoint now supports Apple M1 devices!

Read more: https://t.co/C3uKwEGwY3 #EndpointSecurity

[Heike Ritter @HeikeRitter]

Look what is available now for you 🤓 The Azure Security Center / Azure Defender Ninja training just got a knowledge check and fun cert! https://t.co/uheopxz0LS

[Stefan Ringler @ringlerstefan]

@janbakker_ Brilliant!

[Courtenay Bernier @courbern]

New blog post - Intune device configuration policy duplicator - create a @MSIntune device configuration policy duplicator with @MSPowerAutomate and @MSPowerApps.

https://t.co/y1TNYb2s2u