Need to Know Microsoft 365
Webinar
January 2023
@directorcia
http://about.me/ciaops
Web cast has started
Web cast is being recorded
If you can’t hear anything check
your speaker settings
For questions after the event:
Email : director@ciaops.com
Twitter : @directorcia
Webinar recordings at:
www.ciaopsacademy.com
Free access for CIAOPS patrons
Please:
- Turn off your mobile
- Turn off your email
- Have somewhere to
take notes
http://www.ciaopslearn.com
Agenda
-Microsoft 365 Update
-Defender for Business
-Q & A
News
• 2023 identity security trends and solutions from Microsoft
• https://www.microsoft.com/en-us/security/blog/2023/01/26/2023-identity-security-trends-and-solutions-from-
microsoft/
• Automatic Tenant Allow/Block List Expiration Management is Now Available in
MDO 365!
• https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/automatic-tenant-allow-block-list-expiration-
management-is-now/ba-p/3723447
• Introducing new layout options in OneNote on Windows
• https://insider.office.com/en-us/blog/introducing-new-layout-options-in-onenote-on-windows
• Leverage authenticated scans to prevent attacks on your Windows devices
• https://techcommunity.microsoft.com/t5/microsoft-defender-vulnerability/leverage-authenticated-scans-to-prevent-
attacks-on-your-windows/ba-p/3723855
• Microsoft Cloud Revenues Pile Up as Teams Hits 270 Million Users
• https://office365itpros.com/2022/01/26/microsoft-cloud-revenues-teams-270-million/
Defender for
Business
Microsoft Defender for Business
Elevate your security
Elevate your security with enterprise-grade endpoint protection specially built for businesses with up to 300 employees.
Enterprise-grade
protection
Security for all your devices
with next-gen protection,
endpoint detection and
response, and threat and
vulnerability management.
Easy to use
Streamline onboarding with
wizard-driven set up and
recommended security
policies activated out-of-the-
box to quickly secure devices.
Cost-effective
Endpoint security that keeps
you productive and works with
your IT without compromising
budget.
Endpoint Detection
& Response
Attack Surface
Reduction
Microsoft Defender
for Business
Elevate your security
Next Generation
Protection
Auto Investigation
& Remediation
Threat & Vulnerability
Management
Simplified Onboarding
and Administration
APIs and Integration
Azure Virtual
Desktop
Delivering endpoint security across platforms
How to purchase Microsoft Defender for Business
Microsoft Defender Business
($3pupm)
Enterprise-grade
endpoint security
Per user license
✓ Next generation protection
✓ Cross Platform support (iOS,
Android, Windows, MacOS)
✓ Endpoint Detection and Response
✓ Threat and Vulnerability
Management
✓ …and more
Microsoft 365 Business Premium
($20pupm)
Comprehensive productivity and security solution
Per user license
1) As standalone SKU
Entitlement for use on up to 5 devices
Generally available H1 2022
2) Included as part of Microsoft 365
Business Premium
Microsoft Defender for Business will
roll out to new and existing M365
Business Premium customers, post GA
Microsoft 365 Business Standard ($12.50)
Office apps and services, Teams
Microsoft Defender for Office 365 Plan 1
Intune
Azure AD Premium Plan 1
Azure Information Protection Premium P1
Exchange Online Archiving
Autopilot
Azure Virtual Desktop license
Windows 10/11 Business
Microsoft Defender for Business
Shared Computer Activation
Product comparison
Cross platform and enterprise grade
protection with next-gen protection,
endpoint detection and response, and
threat and vulnerability management
Available as a
standalone offering and
as part of Microsoft 365
Business Premium
Standalone offering will
serve non-Microsoft
365 customers. No
licensing prerequisites
Supports multi-customer
viewing of security incidents
with Microsoft 365 Lighthouse
for partners in preview
Customer size < 300 seats > 300 seats
Endpoint capabilitiesSKU
Microsoft Defender
for Business
Microsoft Defender
for Endpoint Plan 1
Microsoft Defender
for Endpoint Plan 2
Centralized management
Simplified client configuration
Threat and Vulnerability Management
Attack Surface Reduction
Next-Gen Protection
Endpoint Detection and Response 2
Automated Investigation and Response 2
Threat Hunting and 6-months data retention
Threat Analytics 2
Cross platform support for Windows, MacOS, iOS, and Android
Microsoft Threat Experts
Partner APIs
Microsoft 365 Lighthouse for viewing security incidents across customers 3
1
Limited. 2
Optimized for SMB. 3
Additional capabilities planned
Detailed product comparison
Capabilities MDB MDE P1 MDE P2
Threat & Vulnerability
Microsoft secure score l l
Vulnerability management (visibility into software and vulnerabilities) l l
Vulnerability remediation based on Intune integration l l
Attack Surface Reduction
Advanced vulnerability and zero-day exploit mitigations l l l
Attack Surface Reduction rules l l l
Application Control l l l
Network Firewall l l l
Device Control (e.g.: USB) l l l
Network protection l l l
Device-based conditional access l l l
Web Control / Category-based URL Blocking l l l
Ransomware mitigation l l l
Next Gen Protection
Advanced cloud protection (deep inspection and detonation) BAFS l l l
Monitoring, analytics and reporting for Next Generation Protection capabilities l l l
Endpoint Detection and Response
Behavioral-based detection (post-breach) l l
Rich investigation tools l
Custom detections l
6-month searchable data per endpoint l
Advanced hunting l
Evaluation Lab l
Manual response actions - (Run AV scan, Machine isolation, File stop and quarantine) l l l
Live response l l
Detailed product comparison
Capabilities MDB MDE P1 MDE P2
Automatic Investigation and Remediation
Default automation levels l l
Customized automation levels l
Centralized Management
Role-based access control l l l
Simplified client configuration l
Reporting l l l
API's
SIEM Connector l l
API's (Response, Data collection) l l
Partner applications l l
Threat Intelligence
Threat Analytics l l
Custom Threat Intelligence l l l
Sandbox l
3rd party Threat Intelligence Connector l
Partner Support
APIs (For Partners) l l l
RMM Integration l
​MSP Support (Multi-tenant API, multi tenant authentication) l l l
Microsoft Threat Expert
Targeted attack notification l
Collaborate with Experts, on demand l
Platform support
Windows Client l l l
MacOS l l l
Mobile (Android, iOS) l l l
DEMO
Introduction to Microsoft Defender for Servers - https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-servers-introduction
Resources
• What is Defender for Endpoint? - https://docs.microsoft.com/en-us/microsoft-
365/security/defender-endpoint/microsoft-defender-endpoint?view=o365-worldwide
• Defender for Endpoint documentation - http://aka.ms/wvdvirtualevent
• Defender for Business documentation – https://docs.microsoft.com/en-us/microsoft-
365/security/defender-business/?view=o365-worldwide
• Compare Defender plans – https://docs.microsoft.com/en-us/microsoft-
365/security/defender-business/compare-mdb-m365-plans?view=o365-worldwide
• Defender for Business integration with M365 Lighthouse -
https://docs.microsoft.com/en-us/microsoft-365/security/defender-business/mdb-lighthouse-
integration?view=o365-worldwide
• Defender for Business Trial playbook - https://docs.microsoft.com/en-us/microsoft-
365/security/defender-business/trial-playbook-defender-business?view=o365-worldwide
CIAOPS Resources
• Blog – http://blog.ciaops.com
• Free Office 365, Azure video tutorials – http://www.youtube.com/directorciaops
• Free documents, presentations, eBooks – http://slideshare.net/directorcia
• Office 365, Azure, Cloud podcast – http://ciaops.podbean.com
• Office 365, Azure online training courses – http://www.ciaopsacademy.com
• Office 365 and Azure community – http://www.ciaopspatron.com
• CIAOPS Github – https://github.com/directorcia
Twitter
@directorcia
Facebook
https://www.facebook.com/ciaops
Email
director@ciaops.com
Skype for Business
admin@ciaops365.com
Get access to the latest
information by becoming a
Patron
http://www.ciaopspatron.com
That’s all folks!
Thanks for attending

January 2023 CIAOPS Need to Know Webinar

  • 1.
    Need to KnowMicrosoft 365 Webinar January 2023 @directorcia http://about.me/ciaops
  • 2.
    Web cast hasstarted Web cast is being recorded If you can’t hear anything check your speaker settings
  • 3.
    For questions afterthe event: Email : director@ciaops.com Twitter : @directorcia
  • 5.
  • 6.
    Please: - Turn offyour mobile - Turn off your email - Have somewhere to take notes
  • 7.
  • 8.
  • 10.
    News • 2023 identitysecurity trends and solutions from Microsoft • https://www.microsoft.com/en-us/security/blog/2023/01/26/2023-identity-security-trends-and-solutions-from- microsoft/ • Automatic Tenant Allow/Block List Expiration Management is Now Available in MDO 365! • https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/automatic-tenant-allow-block-list-expiration- management-is-now/ba-p/3723447 • Introducing new layout options in OneNote on Windows • https://insider.office.com/en-us/blog/introducing-new-layout-options-in-onenote-on-windows • Leverage authenticated scans to prevent attacks on your Windows devices • https://techcommunity.microsoft.com/t5/microsoft-defender-vulnerability/leverage-authenticated-scans-to-prevent- attacks-on-your-windows/ba-p/3723855 • Microsoft Cloud Revenues Pile Up as Teams Hits 270 Million Users • https://office365itpros.com/2022/01/26/microsoft-cloud-revenues-teams-270-million/
  • 11.
  • 12.
    Microsoft Defender forBusiness Elevate your security Elevate your security with enterprise-grade endpoint protection specially built for businesses with up to 300 employees. Enterprise-grade protection Security for all your devices with next-gen protection, endpoint detection and response, and threat and vulnerability management. Easy to use Streamline onboarding with wizard-driven set up and recommended security policies activated out-of-the- box to quickly secure devices. Cost-effective Endpoint security that keeps you productive and works with your IT without compromising budget.
  • 13.
    Endpoint Detection & Response AttackSurface Reduction Microsoft Defender for Business Elevate your security Next Generation Protection Auto Investigation & Remediation Threat & Vulnerability Management Simplified Onboarding and Administration APIs and Integration
  • 14.
  • 15.
    How to purchaseMicrosoft Defender for Business Microsoft Defender Business ($3pupm) Enterprise-grade endpoint security Per user license ✓ Next generation protection ✓ Cross Platform support (iOS, Android, Windows, MacOS) ✓ Endpoint Detection and Response ✓ Threat and Vulnerability Management ✓ …and more Microsoft 365 Business Premium ($20pupm) Comprehensive productivity and security solution Per user license 1) As standalone SKU Entitlement for use on up to 5 devices Generally available H1 2022 2) Included as part of Microsoft 365 Business Premium Microsoft Defender for Business will roll out to new and existing M365 Business Premium customers, post GA Microsoft 365 Business Standard ($12.50) Office apps and services, Teams Microsoft Defender for Office 365 Plan 1 Intune Azure AD Premium Plan 1 Azure Information Protection Premium P1 Exchange Online Archiving Autopilot Azure Virtual Desktop license Windows 10/11 Business Microsoft Defender for Business Shared Computer Activation
  • 16.
    Product comparison Cross platformand enterprise grade protection with next-gen protection, endpoint detection and response, and threat and vulnerability management Available as a standalone offering and as part of Microsoft 365 Business Premium Standalone offering will serve non-Microsoft 365 customers. No licensing prerequisites Supports multi-customer viewing of security incidents with Microsoft 365 Lighthouse for partners in preview Customer size < 300 seats > 300 seats Endpoint capabilitiesSKU Microsoft Defender for Business Microsoft Defender for Endpoint Plan 1 Microsoft Defender for Endpoint Plan 2 Centralized management Simplified client configuration Threat and Vulnerability Management Attack Surface Reduction Next-Gen Protection Endpoint Detection and Response 2 Automated Investigation and Response 2 Threat Hunting and 6-months data retention Threat Analytics 2 Cross platform support for Windows, MacOS, iOS, and Android Microsoft Threat Experts Partner APIs Microsoft 365 Lighthouse for viewing security incidents across customers 3 1 Limited. 2 Optimized for SMB. 3 Additional capabilities planned
  • 17.
    Detailed product comparison CapabilitiesMDB MDE P1 MDE P2 Threat & Vulnerability Microsoft secure score l l Vulnerability management (visibility into software and vulnerabilities) l l Vulnerability remediation based on Intune integration l l Attack Surface Reduction Advanced vulnerability and zero-day exploit mitigations l l l Attack Surface Reduction rules l l l Application Control l l l Network Firewall l l l Device Control (e.g.: USB) l l l Network protection l l l Device-based conditional access l l l Web Control / Category-based URL Blocking l l l Ransomware mitigation l l l Next Gen Protection Advanced cloud protection (deep inspection and detonation) BAFS l l l Monitoring, analytics and reporting for Next Generation Protection capabilities l l l Endpoint Detection and Response Behavioral-based detection (post-breach) l l Rich investigation tools l Custom detections l 6-month searchable data per endpoint l Advanced hunting l Evaluation Lab l Manual response actions - (Run AV scan, Machine isolation, File stop and quarantine) l l l Live response l l
  • 18.
    Detailed product comparison CapabilitiesMDB MDE P1 MDE P2 Automatic Investigation and Remediation Default automation levels l l Customized automation levels l Centralized Management Role-based access control l l l Simplified client configuration l Reporting l l l API's SIEM Connector l l API's (Response, Data collection) l l Partner applications l l Threat Intelligence Threat Analytics l l Custom Threat Intelligence l l l Sandbox l 3rd party Threat Intelligence Connector l Partner Support APIs (For Partners) l l l RMM Integration l ​MSP Support (Multi-tenant API, multi tenant authentication) l l l Microsoft Threat Expert Targeted attack notification l Collaborate with Experts, on demand l Platform support Windows Client l l l MacOS l l l Mobile (Android, iOS) l l l
  • 37.
  • 39.
    Introduction to MicrosoftDefender for Servers - https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-servers-introduction
  • 41.
    Resources • What isDefender for Endpoint? - https://docs.microsoft.com/en-us/microsoft- 365/security/defender-endpoint/microsoft-defender-endpoint?view=o365-worldwide • Defender for Endpoint documentation - http://aka.ms/wvdvirtualevent • Defender for Business documentation – https://docs.microsoft.com/en-us/microsoft- 365/security/defender-business/?view=o365-worldwide • Compare Defender plans – https://docs.microsoft.com/en-us/microsoft- 365/security/defender-business/compare-mdb-m365-plans?view=o365-worldwide • Defender for Business integration with M365 Lighthouse - https://docs.microsoft.com/en-us/microsoft-365/security/defender-business/mdb-lighthouse- integration?view=o365-worldwide • Defender for Business Trial playbook - https://docs.microsoft.com/en-us/microsoft- 365/security/defender-business/trial-playbook-defender-business?view=o365-worldwide
  • 42.
    CIAOPS Resources • Blog– http://blog.ciaops.com • Free Office 365, Azure video tutorials – http://www.youtube.com/directorciaops • Free documents, presentations, eBooks – http://slideshare.net/directorcia • Office 365, Azure, Cloud podcast – http://ciaops.podbean.com • Office 365, Azure online training courses – http://www.ciaopsacademy.com • Office 365 and Azure community – http://www.ciaopspatron.com • CIAOPS Github – https://github.com/directorcia Twitter @directorcia Facebook https://www.facebook.com/ciaops Email director@ciaops.com Skype for Business admin@ciaops365.com
  • 43.
    Get access tothe latest information by becoming a Patron http://www.ciaopspatron.com
  • 45.