Knowledge Base

Find answers to common questions and learn more about our services

Clear

Security baselines: CIS vs Microsoft Secure Score

## Overview Clients compare you to benchmarks. CIS (Center for Internet Security) and Microsoft Secure Score measure different things—know how to exp...
security-endpoint-protection msp seed-library
Jan 8, 2024 Read more →

Isolating a compromised endpoint: standard play

## Overview Fast containment limits lateral movement. This is a field-tested sequence; adapt to your SOC runbooks and insurance requirements. ## Imm...
security-endpoint-protection msp seed-library
Jan 7, 2024 Read more →

Managing Tamper Protection across tenants

## Overview Tamper Protection prevents local admins (and malware) from disabling Microsoft Defender features. MSPs must standardize enforcement while...
security-endpoint-protection msp seed-library
Jan 6, 2024 Read more →

USB device control policies for regulated clients

## Overview USB removable media is a common data exfiltration and malware vector. Regulated clients often require deny-by-default with narrow excepti...
security-endpoint-protection msp seed-library
Jan 5, 2024 Read more →

BitLocker recovery key escrow in Azure AD

## Overview BitLocker keys must be escrowed to avoid permanent data loss. For Entra ID–joined devices, keys can be stored in Azure AD / Intune so aut...
security-endpoint-protection msp seed-library
Jan 4, 2024 Read more →

Application allowlisting with Windows Defender ASR rules

## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macros, script execution, and credential theft behavio...
security-endpoint-protection msp seed-library
Jan 3, 2024 Read more →

Handling Defender for Business false positives

## Overview False positives waste analyst time and train users to ignore alerts. This article standardizes how technicians triage Microsoft Defender...
security-endpoint-protection msp seed-library
Jan 2, 2024 Read more →

EDR deployment checklist for new workstations

## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that must join a managed tenant with Microsoft Defender...
security-endpoint-protection msp seed-library
Jan 1, 2024 Read more →