About Ethan Bowen
Ethan is an Expert on NVISO's Managed Security Services team. He focuses on Microsoft security tools and architectures. He loves KQL and finding fun things in logs.
Latest Articles
Tracking historical IP assignments with Defender for Endpoint logs
Microsoft 365 Defender
A new incident comes in. The CEO’s laptop shows possible Cobalt Strike activity. Your host investigation shows that the attacker…
