@jeftek.com or @merill.net is there a way to disable attempted auth to an application? a few of my environments are seeing Password Spray against Azure CLI and I was hoping for the ability to block that pre auth, kinda like what we used to do with Legacy Exchange, where I could disable the service

for MDE, What is the easiest/best way to accomplish having devices perform 1 time Full scan when onboarded? I was thinking of Using KQL and a Custom Detection Rule but i was wondering if there was a better way.

🚀 Need to control USB device access in your organization? Here is how I created a policy using Intune! Learn how to block unauthorized USBs and ensure data security. Watch now! 📺🔒 #CyberSecurity #Intune #DefenderForEndpoint youtu.be/TpPPjQfBzCI

🚀 Excited to share my latest video on deploying Microsoft Defender for Identity, using the new MDI PowerShell Module! 🎥 MDI is one of my favorite security products from Microsoft, MDI helps secure on-premises Active Directory environments. 🔒 youtu.be/zM7PHc0_og4 #MDI #msft