All work

Policy 14Enterprise ITEnterprise IT

Automated Microsoft Defender alert triage

Policy path. Signal: Microsoft Defender raises an alert. Decision: PowerShell and Graph API triage logic. Controls: Action Alert triaged automatically; Action Report generated. Outcome: 50% reduction in response time.

If The challenge

Manual security alert triage and reporting affected operational response times.

Then The solution

Automated alert triage and reporting with PowerShell and Microsoft Graph API to reduce manual processing and improve responsiveness.

Result Outcomes

50% faster response time

  • 50% reduction in response time
  • Less manual alert processing

Related evidence

All work

Policy 12Multi-location business

Email remediation and self-service recovery

If
Routine junk email recovery requests depended on the helpdesk, with limited visibility into request handling and…
Then
Built a self-service junk email review and recovery workflow with a request interface, orchestration, email operations…
Result
Reduced helpdesk dependency for the covered recovery process
  • Power Apps
  • Power Automate
  • Microsoft Graph Mail API
  • SharePoint

Policy 17Internal governance

SharePoint permission boundary crawler

If
Reviewing effective information-access boundaries required a detailed view of site and folder permissions, including…
Then
Engineered a PowerShell-based crawler to export site and folder permissions and expand SharePoint group memberships.
Result
Improved visibility into SharePoint access boundaries
  • PowerShell
  • SharePoint Online

Policy 18Internal governance

Microsoft Teams retention and governance investigation

1,315 group chats audited

If
A group-chat message inventory and age-based analysis were required to evaluate Teams retention requirements.
Then
Built an audit workflow with Graph API pagination and throttling handling, chat inventory, message-age analysis and an…
Result
Read 21,900 messages
  • Microsoft Graph API
  • PowerShell
  • Microsoft Purview

Contact

Let's talk about secure Microsoft cloud work.

↑↓ to move · Enter to open · Esc to close