Spy Hunter: Finding Bad Guys with Microsoft Insider Risk Management!

This time I take a look at one my favourite compliance features in Microsoft 365. Insider risk management. This is a critical component of Microsoft’s zero trust strategy and helps identify, investigate and mitigate potential threats within the walls of your company. In this session I look at deploying and administering this awesome feature. As always if you have questions, please post them below and please give the video a big thumbs up if you enjoy.
Visit me at www.Andymalone.org

[@pmd7530]

Another great video Andy.
I’m finding that MS has over complicated these admin centres. There are too many now. Purview, Security & Compliance, security, compliance separated etc.
A video explaining what’s where & why would really help

[@AndyMaloneMVP]

Hmm that’s a great comment. I’ll see what I can do 😀

[@neilgoodman2885]

Yes, you are entitled to a little puffing. Spies, beware, Mr. Andy Malone is on the watch!
Respectfully, NHG

[@soodshubham7671]

Perfect video sir! Thank you :)

[@AndyMaloneMVP]

You're very welcome!

[@espenhaga2375]

Excellent video!

[@AndyMaloneMVP]

Thanks Espen 😀

[@Lanabelle1069]

Hey Andy love your content. Quick question for you, how exactly does the Health Care Policies work? Does Azure have some integration with software such as Epic or Cerner? Thanks

[@AndyMaloneMVP]

I’ll be honest with you, I’ve not used the healthcare templates, as I’m not a healthcare professional. However, yes, is the answer to your question they are designed to integrate with various healthcare, and HR systems via a connector. I was also made recently aware of a healthcare version of Microsoft 365, so this is something you may wish to take a look at. Either way thanks for your question and your ongoing support. 😊 👍

[@jonathanp6508]

Thanks ! Great Video. Which Security license are you using ?

[@AndyMaloneMVP]

Thanks Johnathan, I use E5 & EM&S

[@mohammedishaqasif2809]

Hello Mr. Andy, Greetings of the Day! Thanks a lot for all your amazing videos which constantly explores the Security Features in Azure/Microsoft 365. My Question related to this video is if there is already Microsoft 365 Audit logs enabled by default which provides the insights of all activities within the organization, then what is an additional benefit of using MS Insider Risk Management Feature.

[@AndyMaloneMVP]

Audit logs can provide you with generic information regarding users, logins and so on. Insider risk management is an entirely different tool altogether. It can provide you with deep insights into the behaviour of your users for example it uses AI and machine learning to examine users online behaviour. For example is it normal behaviour for a user to be downloading mass files on a Friday night. This would not be normal behaviour and would be flagged up. I hope this helps and thanks for reaching out.

[@dishupurohit8754]

Exacting to see

[@AndyMaloneMVP]

Thank you 👍