Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat...
Transcript of Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat...
![Page 1: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/1.jpg)
Securing Office 365 for free
![Page 2: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/2.jpg)
Office 365Threat LandscapeHow are the bad guys attacking you?
2
![Page 3: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/3.jpg)
Threat Landscape
Attackers are focusing on people, not technology
» Password spraying
» Brute force login attempts
» Phishing/Social Engineering
» Misconfigured services
![Page 4: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/4.jpg)
Protecting IdentitiesBecause you can’t install antivirus on your users.
![Page 5: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/5.jpg)
Multifactor AuthenticationYes, it’s that important.
Available Methods:
» Random code
» Push notification
» Phone call/Text
» Smart card» Biometric device
Available to all license levels. Azure AD Premium unlocks advanced features.
![Page 6: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/6.jpg)
Risky sign-in reportWhy did Sara log in from Virginia this morning and Nigeria tonight?
Available to all license levels. Azure AD Premium unlocks advanced features.
![Page 7: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/7.jpg)
License Level Comparison
Free and Basic Editions
Azure AD Premium
![Page 8: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/8.jpg)
Protecting DataAre users giving away your sensitive documents?
![Page 9: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/9.jpg)
Default SharePoint permissionsOh yea, I forgot about that.
Available Methods:
Available to all license levels.
![Page 10: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/10.jpg)
Protecting EmailWhere does all this spam come from, anyway?
![Page 11: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/11.jpg)
Tweaking the spam filterA tragically unused option.
Available Options:
Available to all license levels.
![Page 12: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/12.jpg)
External email banner
Available to all license levels.
![Page 13: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/13.jpg)
“Advanced” DNS configSPF, DKIM and DMARC, oh my!
Available to all license levels.
» SPF – Tells the world where your email should come from.
» DKIM – Cryptographically sign each email to prove it came from you.
» DMARC – Additional checks to identify incoming spoofed emails.
![Page 14: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/14.jpg)
Mailbox audit loggingTracing the bad guys’ steps.
Why auditing?
Enabled by default…sort of.
Get-OrganizationConfig | FL AuditDisabled
(Exchange Online Powershell)
What is audited?
Available to all license levels.
![Page 15: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/15.jpg)
Mailbox audit loggingContinued
Default settings:
![Page 16: Securing Office 365 for free - MACUMA€¦ · Securing Office 365 for free. Office 365 Threat Landscape How are the bad guys attacking you? 2. Threat Landscape Attackers are focusing](https://reader036.fdocuments.in/reader036/viewer/2022071219/60542e23caaa3612f80cf420/html5/thumbnails/16.jpg)
On your way to greener pastures. Questions?
16