Skip to content

Commit 5585da0

Browse files
alexverboonalexverboon
committed
February 2026 updates
1 parent ef89a5b commit 5585da0

9 files changed

Lines changed: 33 additions & 22 deletions

File tree

‎docs/GitHub.md‎

Lines changed: 0 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -8,27 +8,6 @@
88

99
- [Azure AD - Attack and Defense Playbook](https://github.com/Cloud-Architekt/AzureAD-Attack-Defense)
1010

11-
## Defender for Endpoint
12-
13-
- [Live Response Scripts from YongRhee](https://github.com/YongRhee-MDE/LiveResponse)
14-
- [Linux - iOS](https://github.com/microsoft/mdatp-xplat)
15-
- [GunDog](https://github.com/jangeisbauer/gundog/blob/main/gundog.ps1)
16-
- [mdatp pwsh](https://github.com/Smalls1652/mdatp-pwsh)
17-
- [AndyFul - ConfigureDefender](https://github.com/AndyFul/ConfigureDefender)
18-
- [David Sass - DefenderASR](https://github.com/sassdawe/HardenWindows/tree/master/WindowsDefender/DefenderASR)
19-
- [Microsoft Defender Advanced Threat Protection PowerShell Module](https://github.com/alexverboon/PSMDATP)
20-
- [defender-atp-manageability](https://github.com/microsoft/microsoft-defender-atp-manageability)
21-
- [MDATP PowerBI](https://github.com/microsoft/MDATP-PowerBI-Templates/blob/master/README.md)
22-
- [Github - Power BI Report templates powered by Microsoft Defender Advanced Threat Protection Advance Hunting Queries](https://github.com/microsoft/MDATP-PowerBI-Templates)
23-
- [MDATP PowerBI](https://github.com/microsoft/MicrosoftDefenderATP-PowerBI)
24-
25-
## Threat Intelligence
26-
27-
- [MDTI Solutions](https://github.com/Azure/MDTI-Solutions)
28-
29-
## ITDR
30-
31-
- [ITDR - Identity Threat Detection and Response](https://github.com/nicolonsky/ITDR)
3211

3312
## KQL
3413

‎docs/entraid.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1762,6 +1762,9 @@
17621762

17631763
## Community Blogs
17641764

1765+
- [Entra Agent ID Portal explained](https://derkvanderwoude.medium.com/entra-agent-id-portal-explained-4b0118f8e91a)
1766+
- [Remediating Agent Identities for Identity Admins and SOCs](https://hybridbrothers.com/posts/agentid-remediation/)
1767+
- [Introducing ScEntra an advanced permission visualizer](https://azurehacking.com/post.html?slug=introducing-scentra-an-advanced-permission-visualizer)
17651768
- [Disable Entra Connect Seamless SSO – Step-by-Step Guide](https://www.cloudcoffee.ch/microsoft-azure/disable-entra-connect-seamless-sso/)
17661769
- [Some policies I use in Conditional Access](https://conditionalaccess.uk/some-policies-i-use-in-conditional-access/)
17671770
- [Token Theft to Account Takeover: How a Stolen Entra ID Token Can Bypass Two-Factor Authentication (MFA)](https://medium.com/@benj_774/token-theft-to-account-takeover-how-a-stolen-entra-id-token-can-bypass-two-factor-authentication-7d3e37311134)
@@ -1834,6 +1837,8 @@
18341837

18351838
## GitHub
18361839

1840+
- [CIS Microsoft 365 Foundations Benchmark v6.0.0 - Automated Compliance Checker](https://github.com/mohammedsiddiqui6872/CIS-Microsoft-365-Foundations-Benchmark)
1841+
- [Azure AD - Attack and Defense Playbook](https://github.com/Cloud-Architekt/AzureAD-Attack-Defense)
18371842
- [Maester](https://github.com/maester365/maester)
18381843
- [Daniel Chronlund](https://github.com/DanielChronlund)
18391844
- [Nicola Suter - Conditional Access Documentation](https://github.com/nicolonsky/ConditionalAccessDocumentation)

‎docs/learn.md‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,4 +46,5 @@
4646

4747
## Tools
4848

49-
- [Docs Tracker](https://docstracker.marshsecurity.org/)
49+
- [Docs Tracker](https://docstracker.marshsecurity.org/)
50+

‎docs/mde.md‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -379,6 +379,17 @@
379379
- [TelemetryCollectionManager](https://github.com/FalconForceTeam/TelemetryCollectionManager)
380380
- [MISP2Defender](https://github.com/cudeso/misp2defender)
381381
- [MAPS Cloud Scanner](https://github.com/HackingLZ/maps_scanner)
382+
- [Live Response Scripts from YongRhee](https://github.com/YongRhee-MDE/LiveResponse)
383+
- [Linux - iOS](https://github.com/microsoft/mdatp-xplat)
384+
- [GunDog](https://github.com/jangeisbauer/gundog/blob/main/gundog.ps1)
385+
- [mdatp pwsh](https://github.com/Smalls1652/mdatp-pwsh)
386+
- [AndyFul - ConfigureDefender](https://github.com/AndyFul/ConfigureDefender)
387+
- [David Sass - DefenderASR](https://github.com/sassdawe/HardenWindows/tree/master/WindowsDefender/DefenderASR)
388+
- [Microsoft Defender Advanced Threat Protection PowerShell Module](https://github.com/alexverboon/PSMDATP)
389+
- [defender-atp-manageability](https://github.com/microsoft/microsoft-defender-atp-manageability)
390+
- [MDATP PowerBI](https://github.com/microsoft/MDATP-PowerBI-Templates/blob/master/README.md)
391+
- [Github - Power BI Report templates powered by Microsoft Defender Advanced Threat Protection Advance Hunting Queries](https://github.com/microsoft/MDATP-PowerBI-Templates)
392+
- [MDATP PowerBI](https://github.com/microsoft/MicrosoftDefenderATP-PowerBI)
382393

383394
## Simulations
384395

‎docs/mdi.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,7 @@
8282

8383
- [Raymond Roethof - Defender for Identity Tools](https://github.com/thalpius?tab=repositories)
8484
- [Defender for Identity Sizing Tool](https://github.com/microsoft/Microsoft-Defender-for-Identity-Sizing-Tool)
85+
- [ITDR - Identity Threat Detection and Response](https://github.com/nicolonsky/ITDR)
8586

8687
## Documentation
8788

‎docs/mdo.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -116,6 +116,8 @@
116116

117117
## Community Blogs
118118

119+
- [Shannon Entropy in KQL](https://www.linkedin.com/pulse/shannon-entropy-kql-remco-hofman-exxce/)
120+
- [Applying Shanon Entropy to SenderDomains via Kusto](https://www.linkedin.com/pulse/applying-entropy-domains-via-threat-hunting-kql-queries-sergio-albea-jbpde/)
119121
- [AiTM/ MFA phishing attacks in combination with “new” Microsoft protections (2025 edition)](https://jeffreyappel.nl/aitm-mfa-phishing-attacks-in-combination-with-new-microsoft-protections-2023-edt/)
120122
- [Microsoft gains on Email Security Market](https://thecloudtechnologist.com/2024/06/25/microsoft-gains-on-email-security-market/)
121123
- [How to protect Microsoft Teams with Microsoft 365 Defender](https://jeffreyappel.nl/how-to-protect-microsoft-teams-with-microsoft-365-defender/)

‎docs/mdti.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,10 @@
8080
- [Get Ahead of Attacks with Microsoft Defender Threat Intelligence](https://medium.com/@officegarageitpro/get-ahead-of-attacks-with-microsoft-defender-threat-intelligence-97e1d7e78034)
8181
- [What innovations should we expect from Microsoft Defender Threat Intelligence (MDTI) in the future?](https://medium.com/@vbcloudboy/what-innovations-should-we-expect-from-microsoft-defender-threat-intelligence-mdti-in-the-future-3f1ff9366ce)
8282

83+
## GitHub
84+
85+
- [MDTI Solutions](https://github.com/Azure/MDTI-Solutions)
86+
8387
## Social Media
8488

8589
- [Microsoft Threat Intelligence](https://twitter.com/MsftSecIntel)

‎docs/sentinel.md‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,12 @@
88

99
## Microsoft Tech Community Blogs
1010

11+
- [Accelerate Your UEBA Journey: Introducing the Microsoft Sentinel Behaviors Workbook](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/accelerate-your-ueba-journey-introducing-the-microsoft-sentinel-behaviors-workbo/4488278)
12+
- [Three ways to run KQL on Microsoft Sentinel data lake: Interactive, Async, or Jobs](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/three-ways-to-run-kql-on-microsoft-sentinel-data-lake-interactive-async-or-jobs/4494657)
13+
- [Unlocking the power of Notebooks with Microsoft Sentinel data lake](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/unlocking-the-power-of-notebooks-with-microsoft-sentinel-data-lake/4494656)
14+
- [Public Preview Announcement: Empower Real-Time Security with Microsoft Sentinel’s CCF Push Feature](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/public-preview-announcement-empower-real-time-security-with-microsoft-sentinel%E2%80%99s/4483884)
15+
- [What’s new in Microsoft Sentinel: February 2026](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/what%E2%80%99s-new-in-microsoft-sentinel-february-2026/4494218)
16+
- [Data lake tier Ingestion for Microsoft Defender Advanced Hunting Tables is Now Generally Available](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/data-lake-tier-ingestion-for-microsoft-defender-advanced-hunting-tables-is-now-g/4494206)
1117
- [Announcing AI Entity Analyzer in Microsoft Sentinel MCP Server - Public Preview](https://techcommunity.microsoft.com/blog/microsoft-security-blog/announcing-ai-entity-analyzer-in-microsoft-sentinel-mcp-server---public-preview/4476230)
1218
- [Microsoft Sentinel Platform: Audit Logs and Where to Find Them](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/microsoft-sentinel-platform-audit-logs-and-where-to-find-them/4481838)
1319
- [Managing Microsoft Sentinel and Microsoft Defender XDR permissions in Microsoft Defender portal](https://techcommunity.microsoft.com/blog/microsoftsentinelblog/managing-microsoft-sentinel-and-microsoft-defender-xdr-permissions-in-microsoft-/4480583)

‎docs/social.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@
2525
- [Ru Campell](https://bsky.app/profile/campbell.scot)
2626
- [Suryendu Bhattacharyya](https://bsky.app/profile/crookedbong.bsky.social)
2727
- [Truls](https://bsky.app/profile/truls.infernux.no)
28+
- [Rogier Dijkman](https://bsky.app/profile/rogierdijkman.bsky.social)
2829

2930
## Defenders on X
3031

@@ -88,6 +89,7 @@
8889
- [Nicola Suter](https://twitter.com/nicolonsky)
8990
- [Olaf Hartong](https://twitter.com/olafhartong)
9091
- [Oliver Kieselbach](https://twitter.com/okieselb)
92+
- [Robbe Van den Daele](https://x.com/RobbeVdDaele)
9193
- [Rogier Dijkman](https://twitter.com/DijkmanRogier)
9294
- [Ru Campell](https://twitter.com/rucam365)
9395
- [Sami Lamppu](https://twitter.com/samilamppu)

0 commit comments

Comments
 (0)