book

Microsoft 365 Security, Compliance, and Identity Administration

by Peter Rising

August 2023

Intermediate to advanced

630 pages

13h 50m

English

Packt Publishing

Read now

Unlock full access

ContributorsAbout the authorAbout the reviewers
Who this book is forWhat this book coversConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Planning your hybrid environmentAuthentication methods in Azure ADMulti-factor authenticationSelf-service password resetConditional AccessPasswordless authenticationSynchronization methods with Azure AD ConnectPassword hash synchronizationPass-through authenticationFederationAzure AD Seamless Single Sign-OnAzure AD Connect cloud syncEvent monitoring and troubleshooting in Azure AD ConnectSummaryQuestionsFurther reading
Implementing Azure AD dynamic group membershipCreating a dynamic group in Azure AD using the Azure portalCreating dynamic groups with Azure AD PowerShellUsing group-based licensing in Azure ADImplementing password managementSetting up SSPRRegistering for SSPRUsing SSPR to reset passwordsCombined registration for SSPR and MFAImplementing and managing external identitiesImplementing and managing MFAEnabling MFAService settingsConfiguring secondary authentication methodsPlanning and implementing device authentication methodsSummaryQuestionsFurther reading
Explaining Conditional AccessCreating a Simple Conditional Access policyConditional Access and Microsoft IntuneIntroducing the types of Conditional AccessDevice-based Conditional AccessApp-based Conditional AccessMonitoring Conditional Access eventsSummaryQuestionsFurther reading
Planning and configuring PIMPlanning PIMConfiguring PIMMonitoring PIMPlanning and configuring entitlement managementPlanning and configuring access reviewsSummaryQuestionsFurther reading
Understanding Identity ProtectionProtecting users with risk and registration policiesConfiguring user risk and sign-in risk policiesConfiguring MFA registration policiesConfiguring alert optionsUsers at risk detected alertsWeekly digestManaging and resolving risk eventsExamining users at riskExamining risky sign-insExamining risk detectionsRisky workload identities (preview)Risk-based Conditional Access policiesSummaryQuestionsFurther reading
Identifying the organizational need for MDIUnderstanding suspicious activityExploring advanced attacks and malicious activitiesUnderstanding the MDI architectureSetting up MDIPrerequisites for MDIInstalling and configuring MDIAdditional configuration optionsManaging and monitoring MDIEntity tagsExcluded entitiesMonitoring MDISummaryQuestionsFurther reading

Planning and implementing MDEOnboarding devicesManaging and monitoring MDEVulnerability managementPartners and APIsEvaluation & tutorialsConfiguration managementImplementing Microsoft Defender Application Guard, Application Control, and exploit protectionConfiguring Microsoft Defender Application GuardConfiguring Microsoft Defender Application ControlConfiguring Microsoft Defender Exploit GuardEncrypting your Windows devices using BitLockerImplementing application protection policiesSummaryQuestionsFurther reading
Protecting users and domains with anti-phishing protection and policiesSetting up an anti-phishing policyConfiguring Safe Attachments options and policiesCreating a Safe Attachments policyCreating a Safe Attachments policy using Windows PowerShellConfiguring Safe Links options, blocked URLs, and policiesCreating a new Safe Links policyCreating a Safe Links policy using Windows PowerShellMonitoring and remediating with Microsoft Defender for Office 365 reportsRunning simulated attacks with Microsoft Defender for Office 365Further attack simulation configuration optionsSummaryQuestionsFurther reading
Planning and configuring Microsoft SentinelConnecting Microsoft Sentinel to a workspaceConnecting Microsoft Sentinel to data sourcesConfiguring playbooks in Microsoft SentinelCreating a simple playbookCreating a playbook using templatesCreating and using automation rules to manage responsesManaging and monitoring your Microsoft Sentinel instanceSummaryQuestionsFurther reading
Planning your MDA implementationConfiguring MDAManaging Cloud App DiscoveryManaging the MDA catalogManaging apps and app connectors in MDAConfiguring policies and templatesUsing Conditional Access App Control with MDAReviewing and interpreting alerts, reports, and dashboardsSummaryQuestionsFurther reading
Planning a sensitivity label solution for your organizationCreating and managing SITsSetting up sensitivity labels and policiesSetting up labelsSetting up label policiesUsing sensitivity labelsConfiguring and using Activity explorerUsing sensitivity labels with Teams, SharePoint, OneDrive, and Office appsSummaryQuestionsFurther reading
Planning and implementing DLPManaging DLP policies for Microsoft 365 workloadsCreating a DLP policyTesting your DLP policyEditing your DLP policyDLP reporting and alerting capabilitiesUsing PowerShell with DLP reportingRequired permissions for DLP reportsFurther alerting capabilitiesImplementing Endpoint DLPSummaryQuestionsFurther reading
Planning for data lifecycle managementRecords managementAnalyzing reports and dashboardsContent explorerActivity explorerConfiguring retention labels and policiesCreating a retention labelCreating a retention label policyApplying retention labelsCreating a retention policyPlanning and implementing adaptive scopesFinding and recovering deleted Microsoft 365 dataUser mailboxesOneDriveSummaryQuestionsFurther reading
Planning for auditing and reportingInvestigating compliance activities by using audit logsPerforming an audit log searchReviewing and interpreting compliance reports and dashboardsConfiguring alert policiesConfiguring audit log retention policiesSummaryQuestionsFurther reading
Recommending eDiscovery (Standard) or eDiscovery (Premium)Planning for content searches and eDiscoveryDelegating the required permissions to use search and discovery toolsCreating eDiscovery casesManaging eDiscovery casesAdding custodiansCollecting dataAnalyzing the review set resultsExporting and downloading case dataAdditional tasksSummaryQuestionsFurther reading
Planning your regulatory compliance journey in Microsoft 365Managing regulatory compliance in Microsoft Purview Compliance ManagerAccess to Compliance ManagerImprovement actionsAssessments and assessment templatesExploring Microsoft PrivaImplementing privacy risk managementImplementing and managing Subject Rights Requests with Microsoft PrivaSummaryQuestionsFurther reading
Implementing Customer LockboxImplementing and managing Communication Compliance policiesImplementing and managing insider risk management policiesGetting started with Insider Risk Management policiesCreating Insider Risk Management policiesImplementing and managing Information Barriers policiesSegments and policies for Information BarriersImplementing and managing Privileged Access ManagementSummaryQuestionsFurther reading
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11Chapter 12Chapter 13Chapter 14Chapter 15Chapter 16Chapter 17
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Overview

Dive into the world of Microsoft 365 security, compliance, and identity administration with this definitive guide. You'll learn to plan, implement, and manage the robust set of security and compliance features offered by Microsoft 365 and hybrid cloud environments.

What this Book will help me do

Understand and secure identity and access management with Microsoft 365 tools.
Deploy and manage end-to-end threat protection with Microsoft Defender.
Implement data loss prevention policies for effective information security.
Administer compliance solutions tailored to organizational requirements.
Gain hands-on expertise with GUI and PowerShell for security management tasks.

Author(s)

Peter Rising is a seasoned Microsoft 365 professional with over 20 years of IT experience specializing in enterprise security and compliance. Known for his approachable teaching style, Peter combines a deep technical knowledge with practical insights to help professionals utilize advanced features effectively.

Who is it for?

This book is perfect for IT administrators and professionals aiming to master security aspects of Microsoft 365. If you have fundamental knowledge of Microsoft 365 and Azure Active Directory administration, this book will help you refine your practical skills. It is also suitable for professionals managing hybrid setups or preparing for security certifications. Whether you're looking to upskill or solidify your expertise in Microsoft 365 security, this guide matches your aspirations.