John Dellinger, Author at Microsoft Security Blog

An image of a black male developer at work in an Enterprise office workspace.

Cybersecurity
June 25, 2020
5 min read

Lessons learned from the Microsoft SOC—Part 3d: Zen and the art of threat hunting

This blog provides lessons learned on how Microsoft hunts for threats in our IT environment and how you can apply these lessons to building or improving your threat hunting program.

Endpoint security
May 4, 2020
7 min read

CISO Series: Lessons learned from the Microsoft SOC—Part 3c: A day in the life part 2

This blog wraps up the day in the life of a SOC analyst on the investigation team with insights on remediating incidents, post-incident cleanup, and impact of COVID-19 on the SOC.

Image of a security worker in her office.

CISO series
December 23, 2019
7 min read

CISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life

In this next post in our series, we provide insight into a day in the life of our SOC analysts investigating common front door attacks.

CISO series
October 7, 2019
9 min read

CISO series: Lessons learned from the Microsoft SOC—Part 3a: Choosing SOC tools

In the next post of our series, we provide tips on choosing technology to help a security operations center (SOC) be more responsive, effective, and collaborative.

CISO series
June 6, 2019
8 min read

CISO Series: Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness

In our second post about people—our most valuable resource in the SOC—we talk about our investments into readiness programs, career paths, and recruiting for success.

CISO series
April 23, 2019
7 min read

CISO Series: Lessons learned from the Microsoft SOC—Part 2a: Organizing people

In the second of our three-part series, we focus on the most valuable resource in the SOC—our people.

Automation
February 21, 2019
7 min read

CISO Series: Lessons learned from the Microsoft SOC—Part 1: Organization

In the first of our three part series, we provide tips on how to manage a security operations center (SOC) to be more responsive, effective, and collaborative.

John Dellinger posts