Using Blumira

Detection Rules & Filters

• Understanding and managing detection rules
• Enabling the detections your organization needs
• Using detection filters in paid Blumira editions
• Best practices for using detection filters to stop unwanted findings
• Testing Blumira detections
• Testing Duo Security detections
• See all 13 articles

Findings

• Investigating "Password Spraying" findings
• About Blumira findings
• Investigating “365 Alert Policy: Creation of forwarding/redirect rule” findings
• Investigating "Audit Policy Change via Auditpol" findings
• Investigating "Batch Script Execution" findings
• Investigating "Connection from Public IP Address" findings
• See all 15 articles

Reporting & Dashboards

• Using the Blumira API
• Using the Report Builder
• Using Blumira Investigate
• Using Executive Summaries
• Identifying and troubleshooting delayed logs using time fields
• Choosing the right data source for your report
• See all 10 articles

Threat Response

• Configuring Microsoft 365 Threat Response
• Using response actions in supported Microsoft and Azure findings
• Manually isolating an endpoint with Blumira Agent
• Automatically isolating Windows endpoints with Blumira Agent
• About Blumira's dynamic blocklists
• Configuring blocklists and managing blocking
• See all 8 articles

Troubleshooting Errors

• Troubleshooting errors in your Microsoft 365 Cloud Connector
• Reviewing Blumira System logs to troubleshoot errors

User Notifications

• About user notifications
• Configuring Blumira to send notifications and scheduled reports to an ITSM tool
• Sending Blumira notifications to a Microsoft Teams channel
• Sending Blumira notifications to a Slack channel