Using Blumira

Detection Rules & Filters

• Understanding and managing detection rules
• Enabling the detections your organization needs
• Using detection filters in paid Blumira editions
• Best practices for using detection filters to stop unwanted findings
• Testing Blumira detections
• Testing Duo Security detections
• See all 14 articles

Dynamic Blocklists

• About Blumira's dynamic blocklists
• About Blumira's intelligence feeds
• Configuring blocklists and managing blocking

Findings

• Using the Blumira API
• About Blumira findings
• Investigating “365 Alert Policy: Creation of forwarding/redirect rule” findings
• Investigating "Audit Policy Change via Auditpol" findings
• Investigating "Connection from Public IP Address" findings
• Investigating "Defender: Malware Threat" findings
• See all 12 articles

Reporting & Dashboards

• Using the Report Builder
• Identifying and troubleshooting delayed logs using time fields
• Choosing the right data source for your report
• Using Blumira Investigate
• Using Executive Summaries
• About the Summary dashboard
• See all 9 articles

Threat Response

• Configuring Microsoft 365 Threat Response
• Using response actions in supported Microsoft and Azure findings
• Detections that support automated blocking with Blumira's dynamic blocklists
• Manually isolating an endpoint with Blumira Agent
• Automatically isolating Windows endpoints with Blumira Agent

Troubleshooting Errors

• Troubleshooting errors in your Microsoft 365 Cloud Connector
• Reviewing Blumira System logs to troubleshoot errors

User Notifications

• About user notifications
• Sending Blumira notifications to a Microsoft Teams channel
• Sending Blumira notifications to a Slack channel