This document contains tips for sysadmins from a presentation on mastering SaaS. It discusses the Kaseya ransomware attack which took 81 hours for a single restore and caused 20+ days of downtime. It recommends testing restore speeds and using immutable infrastructure. Other tips include starting to use Azure Sentinel to collect, detect, investigate and respond to threats autonomously and getting a Microsoft lab kit. It advises visiting securitycenter.windows.com and security.microsoft.com to configure Microsoft E5 licensing for immense security value. It also recommends enabling port protection with phone carriers and using passwordless authentication instead of SMS-based MFA. The document stresses that everyone is a security professional regardless of their IT role.

1. SaaS, Mastered.
7 Essential Hacks
for SysAdmins
Learn tips and tricks to help ease
your SysAdmin life

2. SaaS, Mastered.
DAVE KAWULA
Microsoft MVP
CRISTAL KAWULA
Microsoft MVP
JOHN O'NEILL SR.
Microsoft rMVP
Today's Speakers:

3. SaaS, Mastered.
When
Ransomware
Hits
Kaseya largest single Ransomware (ReVIL)attack in history
Customers did have to pay
The Recovery
SYSADMIN TIP – Test Restore Speed
81 hrs for a single restore job
20 + Days of downtime
SYSADMIN TIP – One Word - IMMUTABLE

4. SaaS, Mastered.
Syslogs (Switches,
Firewalls,
Appliances)
SNMP Traps
What actually is an
alert
Filter the noise
SYSADMIN TIP –
Start using Azure
Sentinel
Collect,
Detect, Investigate,
Respond
Autonomous Threat Hunting
Logs
Everywhere
– filter white
noise

5. SaaS, Mastered.
Modern
Desktop
AD Joined vs. Hybrid AD Joined vs. Azure AD Joined
Management via Endpoint Manager (Intune)
Imaging from the cloud (Autopilot)
SYSADMIN TIP – Get the LAB KIT from Microsoft
https://www.microsoft.com/en-us/evalcenter/evaluate-lab-kit

6. SaaS, Mastered.
Defender ATP Office ATP
Azure ATP Security Center
SYSADMIN TIP – visit
securitycenter.windows.com
and security.microsoft.com
Microsoft E5 Licensing has
immense value when
configured properly
Advanced
Persistent
Threat
Protection

7. SaaS, Mastered.
Cell Phone
Port
Protection
SYSADMIN TIP – Call your carrier
and enable Port Protection
MFA via SMS is not secure
Passwordless Authentication

8. SaaS, Mastered.
Regardless if your role is:
• Service Desk
• Server Admin
• Office 365 Admin
• SQL Admin
SYSADMIN TIP – Everyone is a
Security Professional
Everyone is
a Security
Professional

9. SaaS, Mastered.
Q&A

10. SaaS, Mastered.
A bit about CoreView…

11. SaaS, Mastered.

12. SaaS, Mastered.
Interested in learning more about CoreView?
Gain unparalleled insight around your
organizations Microsoft 365 tech stack.
• Continuously improve your efficiency
• Track how your company uses licenses
• Identify and reduce security risks
Talk to us today!
https://www.coreview.com/request-a-demo/