Mark Simos, Author at Microsoft Security Blog

Endpoint security
May 4, 2020
7 min read

CISO Series: Lessons learned from the Microsoft SOC—Part 3c: A day in the life part 2

This blog wraps up the day in the life of a SOC analyst on the investigation team with insights on remediating incidents, post-incident cleanup, and impact of COVID-19 on the SOC.

Image of a security worker in her office.

CISO series
December 23, 2019
7 min read

CISO series: Lessons learned from the Microsoft SOC—Part 3b: A day in the life

In this next post in our series, we provide insight into a day in the life of our SOC analysts investigating common front door attacks.

Zero Trust
November 11, 2019
6 min read

Zero Trust strategy—what good looks like

Zero Trust is a model that will ultimately be infused throughout your enterprise and should inform virtually all access decisions and interactions between systems.

Image of a developer sitting with a cup of coffee at his desk.

Security intelligence
October 9, 2019
2 min read

Patching as a social responsibility

To plan, implement, and improve an enterprise patch management strategy, Microsoft is partnering with the National Institute of Standards and Technology (NIST) National Cybersecurity Center of Excellence (NCCoE).

CISO series
October 7, 2019
9 min read

CISO series: Lessons learned from the Microsoft SOC—Part 3a: Choosing SOC tools

In the next post of our series, we provide tips on choosing technology to help a security operations center (SOC) be more responsive, effective, and collaborative.

CISO series
June 6, 2019
8 min read

CISO Series: Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness

In our second post about people—our most valuable resource in the SOC—we talk about our investments into readiness programs, career paths, and recruiting for success.

CISO series
April 23, 2019
7 min read

CISO Series: Lessons learned from the Microsoft SOC—Part 2a: Organizing people

In the second of our three-part series, we focus on the most valuable resource in the SOC—our people.

Automation
February 21, 2019
7 min read

CISO Series: Lessons learned from the Microsoft SOC—Part 1: Organization

In the first of our three part series, we provide tips on how to manage a security operations center (SOC) to be more responsive, effective, and collaborative.

Cybersecurity
November 29, 2018
5 min read

CISO series: Secure your privileged administrative accounts with a phased roadmap

If you are working on initiatives to secure your privileged accounts (and I hope you are), this post is designed to help.

Advanced Threat Analytics
June 6, 2018
6 min read

Cybersecurity Reference Architecture: Security for a Hybrid Enterprise

The Microsoft Cybersecurity Reference Architecture describes Microsoft’s cybersecurity capabilities and how they integrate with existing security architectures and capabilities.

Azure Information Protection
February 21, 2018
5 min read

How to mitigate rapid cyberattacks such as Petya and WannaCrypt

Because of how critical security hygiene issues have become and how challenging it is for organizations to follow the guidance and the multiple recommended practices, Microsoft is taking a fresh approach to solving them.

Encryption
February 5, 2018
4 min read

Overview of Petya, a rapid cyberattack

In the first blog post of this 3-part series, we introduced what rapid cyberattacks are and illustrated how they are different in terms of execution and outcome.

Mark Simos posts