Posts

Bringing Automation in Attack Simulation Training and Security Preset together

Image
                                      While utilizing Preset Security Policies in Microsoft Defender for Office 365, that focuses on a "set-and-forget" security posture, organizations can leverage automation in Attack Simulation Training (AST) to further strengthen the security directly through the end users (aka human firewall) by carrying out recurring, randomized testing. In other words, Preset Security Policies help in handling technical blocks (Safe Links, Safe Attachments) while Simulation Automations target the human element. I tested the Automation feature back in December 2025, but never got to blogging about it, and so decided to put a quick read together. Automation in Attack Simulation Training is a closed-loop system which allows organizations to - - Send simulated phishing emails - Observe user behavior - Automatically train users who fail - Repeat at a defined frequency - Track ...

Getting started with Microsoft Defender for Office 365 - Security templates style!

Image
Source credits: Microsoft This one has been long coming and I am glad that I have finally been able to implement Defender for Office 365 in my tenant and write about it. Implementing Defender for Office 365 may seem like a herculean task, and while it can involve many moving parts, organizations can actually set it up quickly using the preset security policies and build over it. What are preset security policies? Preset security policies are Microsoft's recommended starting point for all customers when it comes to their security configuration. Like all changes, it's important to understand any potential impact. They provide a simplified method to apply all of the recommended spam, malware, and phishing policies to users across your organization. As Microsoft adds new threat protection capabilities, preset policies through the templates will automatically stay up to date and continue to enforce ever so evolving recommended settings. More importantly, organizations that are looki...