Keep DLP-enabled Windows clients away from SAP application shares
Why can a Windows client's Endpoint DLP configuration matter to a SAP server share?
Read the briefingDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 110 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
2,777 articlesGuidance and analysis from DSE
Separate a local cloud-app score override from a catalog correction request
Should a disputed Defender for Cloud Apps score be overridden locally or submitted for catalog review?
Read the guide
Bound Defender certificate inventory to the Windows machine stores it observes
What does Defender Vulnerability Management certificate inventory establish, and which certificate locations remain outside it?
Read the explainer
Test iOS app sign-in at the incoming-data boundary
Do not mistake IntuneMAMRequireAccounts for an unconditional app-launch sign-in control.
Read the guide
Keep all calls in an Intune SCEP request on the same NDES server
Can an NDES load balancer send successive calls from one Intune SCEP request to different backends?
Read the guide
Check enrollment-time grouping before choosing Android work-profile staging
Can a corporate-owned Android work-profile staging token also use enrollment-time grouping?
Read the guide
Check cross-service consumers before replacing an Intune targeting group
Can a dynamic group safely become an Intune assignment filter?
Read the guide
Use separate metric rules when conditions must alert independently
Do multiple conditions in one Azure metric alert rule behave as independent alternatives?
Read the explainer
Choose an owned workspace before requiring protected Application Insights tables
Can an Application Insights managed workspace be reused or configured with protected tables?
Read the explainer
Identify the intended Application Insights resource in preview AMA telemetry
When does AMA-based OTLP ingestion require the microsoft.applicationId resource attribute?
Read the guide