Hello ConceptWork, thanks for your excellent work My apologies for if I miss any information in other videos, however, I have some questions: 1. If the user sync OneDrive to the local computer and the ransomware encryt data in OneDrive, is there any way to recover the OneDrive to previous stage? 2. This questions is the same for SPO, if the user synced SPO site or folder to his local computer and the ransomware attack the files in SPO, can I restore the data that was in SPO and ODfB? Suggestions: 1. In MDE, I believe custom indicator is very important, I didn't see this topic in the MDE playlist, Is it possible you speak about this important topic for MDE? 2. For the MDCA playlist, you explained very well all the general settings we can do in MDCA however, for MDE, there is not explanation associated to the features, for example in advanced features you spoke about Intune integration and MDCA integration, however, there are other features that I don't know how to use, for example: "Enable EDR in block Mode", Custom netowork indicators, Allow or block file, Tamper protection, Web Content filtering" I saw all the 51 videos you have for MDE, they were great, If possible and if you don't mind, the settings for MDE will be great if you explain them. Thank you very much.
Hello Concepts Works, If possible, can you explain how MDE work as passive mode when the device already has other anti-virus (i.e. trendMicro, Symantec, McAfee, etc). How we can put the MDE as passive and how can we move it to active and put the second in passive. The objective is to implement MDE in an environment with device protection already in place. Regards,
@@Sergio-Here-In-Community If you already have an active antivirus then Defender will go into passive mode once you onboard the devices, you dont have to do anything. As far as i know you cannot make Defender active and other antivirus as passive.
Do you know if Controlled folder Access also prevents ransomware from copying and sending copies of computer files to external servers?
Hello ConceptWork,
thanks for your excellent work
My apologies for if I miss any information in other videos, however,
I have some questions:
1. If the user sync OneDrive to the local computer and the ransomware encryt data in OneDrive, is there any way to recover the OneDrive to previous stage?
2. This questions is the same for SPO, if the user synced SPO site or folder to his local computer and the ransomware attack the files in SPO, can I restore the data that was in SPO and ODfB?
Suggestions:
1. In MDE, I believe custom indicator is very important, I didn't see this topic in the MDE playlist, Is it possible you speak about this important topic for MDE?
2. For the MDCA playlist, you explained very well all the general settings we can do in MDCA
however, for MDE, there is not explanation associated to the features, for example in advanced features you spoke about Intune integration and MDCA integration, however, there are other features that I don't know how to use, for example: "Enable EDR in block Mode", Custom netowork indicators, Allow or block file, Tamper protection, Web Content filtering"
I saw all the 51 videos you have for MDE, they were great, If possible and if you don't mind, the settings for MDE will be great if you explain them.
Thank you very much.
Hello Concepts Works,
If possible, can you explain how MDE work as passive mode when the device already has other anti-virus (i.e. trendMicro, Symantec, McAfee, etc).
How we can put the MDE as passive and how can we move it to active and put the second in passive.
The objective is to implement MDE in an environment with device protection already in place.
Regards,
@@Sergio-Here-In-Community If you already have an active antivirus then Defender will go into passive mode once you onboard the devices, you dont have to do anything. As far as i know you cannot make Defender active and other antivirus as passive.