173 questions with Microsoft Defender for Identity-related tags
Permission needed to access alert in Microsoft defender
You can’t access this section Sorry, you can’t access this section. Check with your administrator for the role-based access permissions to see the data. I am a global admin and have the security roles assigned
o365 Defender Portal Incident Notifications
I have followed articles online to setup email notifications for incidents in the defender portal for medium and high detections. I noticed a medium incident in the portal which I did not get an email for. I have read articles online of others having the…
How to fully Uninstall/Clean-up Microsoft Defender Endpoint
Hello, We are having issues trying to use a migration tool to move our devices to another Microsoft tenant. It seems to be struggling gaining access and deleting a regkey that is link to a service for MDE. The tool is running and using the system…
Security Recommendations for LAPS are outdated
These recommendations in the Microsoft Secure Score seems to be ignoring the new Windows LAPS and looking at the old LAPS. When we changed over to the Windows LAPS, these recommendations started getting flagged. I thought Microsoft would eventually…
![](https://techprofile.blob.core.windows.net/images/7EQ5-HY98kGi4i9V9wyPSg.png?8DAAFF)
Well I just not able to remove the (DOS/Hurri) virus from my pc , what should I do ?
This is what I am getting
how to disable Microsoft Defender SmartScreen
Blocking Battlenet downloads!
Microsoft Defender
Hi Team, Wonder if you could help, please. We're exploring the functions within the Attack Simulation module in Microsoft 365 Defender. When Configuring the simulation, under Send end user notification, we get multiple options for delivery preferences…
HackTool:Win32/AutoKMS Alert detected for VB.Net Exe
.Net EXE is flagging for Win32/AutoKMS. By checking the code we do not see anything which should be a problem: Please suggest on what should be done further on this
Defender Self loop back VPN + Company VPN
Hello everyone, I'm currently working on iPhone enrollment with the Company Portal and Defender iOS app. I appreciate Defender's local VPN option as it adds web protection, but I noticed when I activate my company VPN (needed for some apps), the…
![](https://techprofile.blob.core.windows.net/images/mmZjVX7E9E2norR_QCwc-w.png?8DC8CC)
OpenSSL vulnerabilities showing in Defender Dashboard
We have multiple devices showing up with OpenSSL vulnerabilities. It is detecting two dll files that it is flagging. Which they are libssl-3-x64.dll and libcrypto-3-x64.dll. It is flagging this for multiple different applications through out multiple…
Microsoft.Tri.Sensor.Updater.exe Sensor
Hi, How install sensor in DC server. Need to know any troubleshooting steps for Microsoft.Tri.Sensor.Updater.exe sensor if possible share the deep dive document about sensor
Managed installer errors for specific devices
Hello Please i need your help on this issue. We are trying to roll out Windows Defender Application Control (WDAC) to the devices however, when we enabled the managed installer it is failing on some of the devices. When I export the devices status the…
ResourceNotFound for defender for Identity incidents
Hi, we are trying to get Defender for Identity incidents using this: curl -X GET https://api.security.microsoft.com/api/incidents/{} -H "Accept: application/json" -H "Authorization: Bearer <>" -H "Content-Type:…
How to get the impacted asset (user or client) when fetching alerts (v2) from Defender using API?
Hello, I followed this documentation to list alerts from Defender https://video2.skills-academy.com/en-us/graph/api/security-list-alerts_v2?view=graph-rest-beta&tabs=http While I am getting the output, it is very different from when I fetch the alerts…
Please allow subscriptions on new Alerts API (/alerts_v2)
Hi, To automate the remediation of high-level alerts, we have set up Powerautomate flows for : revoke sessions and block a user concerned by a High alert in cases of phishings or abnormal connections (UserEvidence) isolate workstations in cases of…
Not allowing to connect Sentinel Data connector with Defender XDR
Hello, I was trying to connect the "Microsoft Defender XDR" connector with "Microsoft Sentinel", but I am facing the below error. I am not sure why Sentinel is not allowing to establish the XDR connector. As I am the Owner of the…
![](https://techprofile.blob.core.windows.net/images/SbBXW6wumkK4XgZSyURk4A.png?8D926C)
Microsoft Endpoint DLP
If I want to Deploy Microsoft Endpoint DLP in my organization? What kind of licenses do I required. I already have Business basic & Business Standard licenses with me will that work?
A Microsoft Intune license was not found
I'm trying to enable defender for endpoint and I'm getting this error. I already have E3 license assigned to me. How to fix this?
No License Found - Microsoft Defender
Hi there, I am seeing the following message when opening Microsoft Defender on a Mac (deployed via Intune). We do have Defender license assigned to user via Business Premium. We already have set section 1 set to Windows 10 and 11 in Microsoft Defender…