Microsoft Defender for Endpoint

Microsoft Defender for Endpoint - Opis

Description
Microsoft Defender for Endpoint is a powerful tool for securing your environment, and this book is your practical guide to using it effectively. Written by an engineer who works hands-on with the daily challenges of IT infrastructure, it covers everything from on-prem data centers to cloud platforms like AWS, Azure, and GCP, across Windows, Linux, macOS, Android, and Kubernetes.

This book offers a focused, practical guide to MDE, covering its architecture, evolution, and key features. While centered on MDE, it also addresses broader cybersecurity concepts relevant to DevOps, SREs, developers, system administrators, and newcomers entering the field. You will explore endpoint protection principles, the threat landscape, and frameworks like MITRE ATT&CK, along with deployment across Windows, macOS, and Linux. It covers EDR, SOC operations, data protection with Microsoft Purview, and incident response using Live Response. With rising threats powered by AI, deepfakes, and organized cybercrime, this guide prepares you to secure hybrid and cloud infrastructures using Microsoft Defender for Azure and Microsoft 365, backed by practical configurations, case studies, and a forward-looking view of endpoint security.

By the time you reach the final chapter, you will possess a strong technical understanding of MDE, equipped with the practical knowledge to confidently implement, manage, and leverage its full capabilities to defend your digital assets and enhance your organization's security posture.

What you will learn
Understanding of (...) więcej security domains like XDR, MDR, EDR, CASB, TVM, etc.
Learn to perform the SOC analyst and security administrator roles using Microsoft security products.
Security incident management and problem management using Microsoft security.
Advanced hunting queries like Kusto Query Language (KQL).
Management of MDE and endpoints through Microsoft Intune Endpoint Manager.
Management of MDE using the Security Web Portal.
Learn cloud and container security and DevSecOps techniques around it.
Learn cross-platform (Linux, macOS, and Android) endpoint security.

Who this book is for
This book is for college graduates, DevOps, SRE, software developers, system administrators who would like to switch to a security profile, or especially into the early starting roles like SOC analyst, security administrators, or would like to learn the Microsoft security products. A foundational understanding of endpoint security concepts and Windows/macOS/Linux operating systems will be beneficial for readers.

Table of Contents
1. Introduction to Microsoft Defender Endpoint
2. Understanding Endpoint Security Fundamentals
3. Deploying Microsoft Defender Endpoint
4. Configuring Microsoft Defender Endpoint
5. General EDR with Respect to SOC
6. Monitoring and Alerting with Defender SOC
7. Defender SOC Investigating Threats
8. Responding to Threats with Defender SOC
9. Endpoint Vulnerability Management
10. Cross-platform Endpoint Security
11. Endpoint Security for Cloud Environments
12. Managing and Maintaining Microsoft Defender Endpoint
13. Future Ahead with AI and LLM
14. Practical Configuration Examples and Case Studies
O autorze: Shailender Singh is a principal site reliability engineer and a solution architect with around 11 year's IT experience who holds two master's degrees in IT and computer application. He has worked as a C developer on the Linux platform. He had exposure to almost all infrastructure technologies from hybrid to cloud-hosted environments. In the past, he has worked with companies including Mckinsey, HP, HCL, Revionics and Avalara and these days he tends to use AWS, K8s, Terraform, Packer, Jenkins, Ansible, and OpenShift. mniej