Microsoft 365 Defender Enterprise Deployment: 6-Week Implementation

What are BlueVoyant Deployment Services?

With BlueVoyant’s Microsoft Security Deployment services, you don’t need to be an expert to take your security and compliance posture to the next level. Our Deployment services are designed to get you up and running quickly and to maximize your investment in Microsoft with hands-on services that include onboarding and baseline configuration services for the implementation of specific Microsoft Security solutions.

BlueVoyant will perform a detailed analysis of your environment(s) and provide actionable security insights leveraging the BlueVoyant catalog of pre-built playbooks and alert rules. The service includes a detailed assessment of your risks, guidance on how best to leverage Microsoft-powered solutions, and/or deployment and configuration assistance to best meet the requirements of your unique situation. The services are delivered by BlueVoyant Microsoft certified experts who specialize in Microsoft 365 Defender, Microsoft Defender for Cloud, and Microsoft Sentinel. 

What does the Microsoft 365 Defender Deployment Enterprise service include?

The Microsoft 365 Defender Deployment Enterprise includes the deployment and implementation of security features within the Microsoft 365 Defender product suite included in the Microsoft 365 E5/A5/G5 & E5 Security licenses - 

• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Defender for Cloud Apps
• Azure Active Directory Identity Protection
• Azure Active Directory Password Protection

Key Services Delivered:

• Deploy Microsoft Defender for Endpoint agents and devices using Microsoft Best Practice Configurations for endpoint security 
• Defender for Office 365 Email assessment to review SPF, DMARC, & DKIM, as well as Safe Links, Safe Attachments, Anti-Spam, Anti-Phishing, SafeDocs and Anti-Malware feature enablement

• Enable integrations and basic settings for Defender for Cloud Apps 
• Assist customer in deploying sensors and policy review for Defender for Identity
• Review Azure Active Directory Identity Protection policies
• Maximize your E5/A5 investment for enhanced security signals with unique compatibility options with existing security tools such as CrowdStrike, SentinelOne, and Carbon Black
• Add the following managed custom SOAR remediations in Azure Sentinel: 
• Revoking a user session or Block logins for a user;
  Disable an email account, or a user account;
  Modify user permission levels or sharepoint group membership or AD group membership;
  Delete a file or an email;
  Quarantine a file or an email;

Why customers choose BlueVoyant