Knowledge Base
Find answers to common questions and learn more about our services
USB device control policies for regulated clients
## Overview
USB removable media is a common data exfiltration and malware vector. Regulated clients often require deny-by-default with narrow excepti...
security-endpoint-protection
msp
seed-library
Jan 5, 2024
Read more →
BitLocker recovery key escrow in Azure AD
## Overview
BitLocker keys must be escrowed to avoid permanent data loss. For Entra ID–joined devices, keys can be stored in Azure AD / Intune so aut...
security-endpoint-protection
msp
seed-library
Jan 4, 2024
Read more →
Application allowlisting with Windows Defender ASR rules
## Overview
Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macros, script execution, and credential theft behavio...
security-endpoint-protection
msp
seed-library
Jan 3, 2024
Read more →
Handling Defender for Business false positives
## Overview
False positives waste analyst time and train users to ignore alerts. This article standardizes how technicians triage Microsoft Defender...
security-endpoint-protection
msp
seed-library
Jan 2, 2024
Read more →
EDR deployment checklist for new workstations
## Overview
Use this runbook when onboarding a new Windows workstation or re-imaging a device that must join a managed tenant with Microsoft Defender...
security-endpoint-protection
msp
seed-library
Jan 1, 2024
Read more →