Microsoft Security

Start identifying and responding to threats in your Microsoft environment immediately – integrate Blumira’s cloud SIEM with your Microsoft stack in a matter of hours. Our M365 Threat Response allows you to take action directly within Blumira to disable potentially compromised users, saving you time and expediting remediation.

Setup is fast and easy for M365 using Cloud Connectors, no additional infrastructure or sensor required.

Microsoft Integrations for Blumira:

• Microsoft Office 365

• Microsoft Cloud App Security

• Microsoft Azure Event Hub

• Microsoft Defender for Endpoint/Intune

• Microsoft Active Directory

• Microsoft Windows Server

• Microsoft Windows Firewall

• Microsoft Windows PowerShell

• Blumira Agent for Windows

The Blumira security team has created best practice guides that walk you through Microsoft configurations. These guides can help your organization reduce your attack surface and security risk. They use free add-ons or tools already available in your existing Microsoft environment.

Not all traditional SIEMs or detection solutions are able to consistently identify Windows threats. We’ve developed detection tests you can use to identify security gaps in your tool capabilities to help you better understand your risk profile.

Microsoft Best Security Practice Guides:

• How to Disable Null Session

• How to Disable LLMNR, NetBios & More

• How to Configure SMB Signing

Microsoft Security Detection Tests:

• PowerShell Execution Policy Bypass

• Domain Administrator Account Creation