Name: Webinar Replay – Getting the Most Value From Your Microsoft E3/E5 Security Products (and Minimizing Costly Pitfalls)
Start: 2023-05-24

As organizations continue to move business operations to the cloud, security teams are considering native security tools within Microsoft’s suite, such as Microsoft Sentinel, Microsoft 365 Defender and Defender for Cloud. However, Microsoft’s cost structure can be complex, and organizations often struggle to get the most from their investments, running into pitfalls that can be easily overlooked during the buying cycle and even after implementation.

Watch Kroll Cyber Risk experts Scott Hanson, Thomas Hind and Rafael De Lima share key steps you can take to leverage Microsoft E3/E5 security solutions more effectively and securely.

This webinar covers:

The security technologies to prioritize from your E5/Microsoft Defender license
Tuning Microsoft-specific detections and playbooks in line with your threat landscape
The most effective ways to integrate Microsoft Defender products and Microsoft Sentinel
Key steps to incorporate threat intelligence and DFIR principles into your response actions

You can also download the slide deck here.

What is a cyber attack?

We recommend to focus on typical areas of attack (endpoint, identity and email), but to also consider products that are cost-effective and require lower effort to implement. We’d therefore recommend prioritizing the following:

Defender for Endpoint: Provides unparalleled visibility into activity on endpoints as well as the ability to actually go in and enact change, in response to security incidents, either through manual work, or as part of automated response.
Defender for Identity/Azure Active Directory: Adds the additional context of user activity not just in the endpoint, but also as they interact with the wider Office365 environment. With Azure Active directory, organizations can have a central identity and authentication source across multiple third party SaaS environments.
Defender for Office 365: Microsoft’s own recommendation is to use the pre-set policies as much as possible. Enabling Defender for Office365 provides protection against threat vectors such as email, shared links, attachments or even through collaboration tools like SharePoint, Teams and Outlook.

Webinar Replay – Getting the Most Value From Your Microsoft E3/E5 Security Products (and Minimizing Costly Pitfalls)

Key Questions Asked During the Session

Connect with us

Cyber and Data Resilience

Kroll Responder MDR

Kroll Responder MDR for Microsoft Security

24x7 Incident Response

Threat Exposure and Validation

Office 365 Security, Forensics and Incident Response

Kroll is headquartered in New York with offices around the world.