Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office...

23
Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser Microsoft MVP @jaap_brasser

Transcript of Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office...

Page 1: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Rapid Incident response inOffice 365, with PowerShell

Jeff Melnick

Solutions EngineerNetwrix Corporation

Jaap Brasser

Microsoft MVP@jaap_brasser

Page 2: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Jaap Brasser

Tweets

Blogs

Works

Does

Likes

@jaap_brasser

@jaapbrasser.com

Tech Marketer @ Rubrik.com

Blogger, Speaker, Tech Enthusiast

Cloud Automation, Scripting & Security

Page 3: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Agenda

Demo Environment

Reporting issues

Troubleshoot licensing

Manage Office 365 accounts

Netwrix Auditor automated response

Q&A

Prize Drawing

Page 4: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

DemoEnvironment

Page 5: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Reporting Issues

Page 6: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Demo Code

Page 7: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Troubleshoot licensing

Page 8: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Demo Code

Page 9: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Manage Office 365 accounts

Page 10: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Demo Code

Page 11: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Searchall user mailboxes

Page 12: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Demo Code

Page 13: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Demonstration

Netwrix Auditor

Page 14: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

About Netwrix Auditor

Netwrix Auditor is an agentless data security platform that empowers organizations to accurately identify

sensitive, regulated and mission-critical information and apply access controls consistently, regardless of

where the information is stored.

It enables them to minimize the risk of data breaches and ensure regulatory compliance by proactively

reducing the exposure of sensitive data and promptly detecting policy violations and suspicious user behavior.

Netwrix Auditor

Page 15: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Netwrix Auditor Unified Platform

Netwrix Auditor for

Active Directory

Netwrix Auditor for

Windows File Servers

Netwrix Auditor for

Oracle Database

Netwrix Auditor for

Azure AD

Netwrix Auditor for

EMC

Netwrix Auditor for

SQL Server

Netwrix Auditor for

Exchange

Netwrix Auditor for

NetApp

Netwrix Auditor for

Windows Server

Netwrix Auditor for

Office 365Netwrix Auditor for

SharePoint

Netwrix Auditor for

VMware

Netwrix Auditor for

Network Devices

Add-on for

Amazon Web Services

Add-on for

Generic Linux Syslog

Add-on for

Splunk

Add-on for

ServiceNow ITSM

Add-on for

IBM QRadar

Infrastructure Unstructured Data Structured Data Cloud Free Add-ons

Data Discovery & Classification

Page 16: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Netwrix Auditor Console

Page 17: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Interactive Search

Page 18: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Office 365 Activity

Page 19: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Exchange Online Mailbox Permission Changes

Page 20: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Product Demonstration

Page 22: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

Questions?

Page 23: Rapid Incident response in Office 365, with PowerShell€¦ · Rapid Incident response in Office 365, with PowerShell Jeff Melnick Solutions Engineer Netwrix Corporation Jaap Brasser

www. .com

Thank You!

Jeff Melnick

Solutions EngineerNetwrix Corporation

Jaap Brasser

Microsoft MVP@jaap_brasser