Defender Advanced Threat Protection for Server 2019
Are you ready to start deploying Windows Server 2019? If so, you must read this book as the built-in Windows Defender Anti-Virus is not enough for protection. It is like downloading a free version of Anti-Virus and running it on your servers. With Microsoft Defender Advanced Threat Protection you get all of this and more!!
The authors are letting you choose the price you pay for this book!
Are you ready to start deploying Windows Server 2019? If so, you must read this book as the built-in Windows Defender Anti-Virus is not enough for protection. It is like downloading a free version of Anti-Virus and running it on your servers. With Microsoft Defender Advanced Threat Protection you get all of this and more!!
About
About the Book
Are you ready to start deploying Windows Server 2019? If so, you must read this book as the built-in Windows Defender Anti-Virus is not enough for protection. It is like downloading a free version of Anti-Virus and running it on your servers. With Microsoft Defender Advanced Threat Protection you get all of the robust features you would expect out of an enterprise Anti-Virus / Malware / and Security Product. These do not come pre-installed and require configuration via securitycenter.microsoft.com. This book will walk you through how to setup, configure, and test Defender Advanced Threat Protection.
Price
Pick Your Price...
Minimum price
$19.95
$49.95
You pay
$49.95Authors earn
$39.96Author
About the Authors
Dave Kawula
Dave is a Microsoft Most Valuable Professional (MVP) with over 20 years of experience in the IT industry. His background includes data communications networks within multi-server environments, and he has led architecture teams for virtualization, System Center, Exchange, Active Directory, and Internet gateways. Very active within the Microsoft technical and consulting teams, Dave has provided deep-dive technical knowledge and subject matter expertise on various System Center and operating system topics.
Dave is well-known in the community as an evangelist for Microsoft, 1E, and Veeam technologies. Locating Dave is easy as he speaks at several conferences and sessions each year, including TechEd, Ignite, MVP Days Community Roadshow, and VeeamOn.
Recently Dave has been honored to take on the role of Conference Co-Chair of TechMentor with fellow MVP Sami Laiho. The lineup of speakers and attendees that have been to this conference over the past 20 years is really amazing. Come down to Redmond or Orlando in 2018 and you can meet him in person.
As the founder and Managing Principal Consultant at TriCon Elite Consulting, Dave is a leading technology expert for both local customers and large international enterprises, providing optimal guidance and methodologies to achieve and maintain an efficient infrastructure.
BLOG: www.checkyourlogs.net
Twitter: @DaveKawula

Episode 87
An Interview with Dave Kawula
Cristal Kawula
Cristal Kawula is the co-founder of MVPDays Community Roadshow and #MVPHour live Twitter Chat. She is the President of TriCon Elite Consulting where she manages the day to day operations of the field consulting and sales teams.
Cristal is also only the 2nd Woman in the world to receive the prestigious Veeam Vanguard Community excellence award. In July of 2017 she was awarded the designation of Microsoft MVP.
Early in her career Cristal worked as a consultant with Microsoft authoring content for internal SMSGR and GTR teams. This content was used to train internal support engineers and global escalation engineering teams.
Cristal can be found speaking at Microsoft Ignite, MVPDays, and other local user groups. She is extremely active in the community and has recently helped publish a book for other Women MVP’s called Voices from the Data Platform.
BLOG: http://www.checkyourlogs.net
Twitter: @supercristal1
John O'Neill Sr.
John’s professional IT career began as a teenager, taking him on many wonderful adventures over the past 30 years. John’s IT path started with programming, but branched out quickly. Opportunities from the Help Desk to the Corner Office shape his IT journey. Specializing in Systems and Infrastructure technologies, John’s broad skillset includes Desktop and Server OS, Identity Management, Networking Services, Network Architecture, IP Telephony, and Security.
Passionate about giving back to the IT community, John develops relevant, timely content IT Pros take advantage of immediately. Part of the MVPDays team, he develops both online and in-print content. In addition, John authored material as a contributing editor for the Petri.co.il online community as well as senior contributor to Tom’s IT Pro, Redmond Magazine, Netwrix, and both Thomson-Reuters' Aspatore Books and Exec Blueprints publications.
Helping others succeed and advance in IT drives John to share knowledge. Speaking at conferences worldwide, developing technology training courses for Pluralsight’s online training library, and leading webinars are all regular investments by John in the current and next generation of IT professionals.
John is proud to be honored by industry organizations, leaders, and peers. John is a four-time recipient of Microsoft’s MVP Award. John received NEOSA’s CIO of the Year Award in 2012.
Cary Sun
Cary Sun has a wealth of knowledge and expertise in data center and deployment solutions. As a Principal Consultant, he likely works closely with clients to help them design, implement, and manage their data center infrastructure and deployment strategies.
With his background in data center solutions, Cary Sun may have experience in server and storage virtualization, network design and optimization, backup and disaster recovery planning, and security and compliance management. He holds CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999. Cary is also a Microsoft Most Valuable Professional (MVP), Microsoft Azure MVP, Veeam Vanguard and Cisco Champion. He is a published author with several titles, including blogs on Checkyourlogs.net, and the author of many books.
Cary is a very active blogger at checkyourlogs.net and is permanently available online for questions from the community. His passion for technology is contagious, improving everyone around him at what they do.
Blog site: https://www.checkyourlogs.net
Web site: https://carysun.com
Blog site: https://gooddealmart.com
Twitter: @SifuSun
in: https://www.linkedin.com/in/sifusun/
Amazon Author: https://Amazon.com/author/carysun
Emile Cabot
Émile is a six-time Microsoft Most Valuable Professional (MVP) who started in the industry during the mid-90s working at an ISP and designing web sites for celebrities. He has a strong background specializing in datacenter and deployment solutions, and has spent many years performing infrastructure analyses and solution implementations for organizations around the world.
Émile organizes the Calgary Microsoft User Group, blogs on CheckYourLogs.net, and has presented at several conferences, including Ignite, VeeamOn, TechMentor, TechReady, and MVPDays.
Contents
Table of Contents
Foreword by iii
Acknowledgments iii
From Dave iii
About the Authors iv
Dave Kawula – Microsoft MVP iv
Cristal Kawula – Microsoft MVP v
Emile Cabot – Microsoft MVP vi
Cary Sun – Microsoft MVP vii
John O’Neill Sr – Re-Connect Microsoft MVP viii
Contents ix
Introduction 14
MVPDays Online 14
Sample Files 15
Additional Resources 15
Chapter 1 17
Setting up your Azure Subscription from Scratch 17
Chapter 2 24
Building a Hyper-V Nested VM with Multiple Public IP Addresses in Azure 24
Building a Windows Server 2016 Virtual Machine 24
Creating Multiple Internal and External IP’s for the Lab 35
Enable Hyper-V in the LAB Virtual Machine 42
Configuring NAT Networking with one Public IP Address 50
Configuring NAT Networking with Multiple Public IP Address 53
Adding an IP Address to the lab Host (VM) 53
Configuring Routing and Remote Access on the Azure Nested Virtual Machine 57
Configure NAT Rules in RRAS for the Lab 65
Disable Windows Firewall 72
Create a NAT Rule in the Azure NSG for the Lab 74
Testing the NAT Rules in the lab 80
Using PowerShell to automate RRAS NAT Rule Configurations 85
Chapter 3 88
Using BigDemo to Build your Lab 88
Lab Server Names 88
Building the Lab with BigDemo_DefenderATP_Server2019.PS1 91
Chapter 4 95
Configuring Windows Admin Center 95
Install Google Chrome and Mozilla FireFox 96
Configure Windows Admin Center 97
Configure Azure Integration 99
Configure Azure Backup 104
Verifying Backups locally with the Backup Microsoft Azure Backup Agent 110
Configuring Windows Azure Update Management 112
Configure Azure Site Recovery 119
Upgrade to Security Center Standard in Azure 125
Chapter 5 127
Defender Advanced Threat Protection ATP 127
Onboarding a Server with Windows Defender ATP 128
Reviewing an Incident with Windows Defender Advanced Threat Protection 130
Chapter 6 133
Simulating a Ransomware Attack 133
KnowBe4 Ransomware Simulator on Windows Server 2019 133
Enabling Ransomware Protection on Windows Server 2019 141
Executing a Ransomware Attack with PowerShell 145
Chapter 7 152
Attack Simulation – Document Drops Back Door 152
Attempting the Attack with Defender Enabled 153
Chapter 8 165
Attack Simulation – PowerShell Fileless Attack 165
Attempting the Attack with Defender Enabled and Exploit Protection at Default Settings 166
Configure Exploit Protection 170
Attempting the Attack with Defender Enabled and Exploit Protection configured for Notepad.exe 171
Chapter 9 176
Attack Simulation – Live Response 176
Enabling Live Response in Defender Security Center 177
Chapter 10 179
Attack Remediation – Chat with Threat Experts at Microsoft 179
Contacting Microsoft Threat Experts 179
Chapter 11 182
Recovering from Ransomware using Azure Site Recovery 182
Notes from the Field 182
Why Airgapped Replicas are the only choice 182
Why Planned Failover is no longer an option 182
Failover Now is the only Option 183
Watch you Six (Clock) 183
Do not connect your Azure Site Recovery Virtual Machines to a live Site-to-Site VPN 184
When can I get back into my data? 184
Ok, so I didn’t listen and lost everything now what? 185
Don’t forget to tune your Replication Policy 186
Testing Failover can be a quick Ransomware Fix 186
Reset Settings for your Azure Site Recovery Hyper-V Host 187
Enable Diagnostic Logging for Azure Site Recovery 192
Zero Day time to Failover 193
Assuming an Admin Level breach Failing over 100 % to Azure 193
Executing a PowerShell based Ransomware Attack on Domain Controllers. 193
Encrypting the Sysvol Folder 195
Taking Down Production Killing Domain Controllers with Ransomware 201
Encrypting the Active Directory Database 201
Survival Mode Recovering to Azure 208
Tick Tock time to make a decision – We are Recovering to Azure 209
Performing the Double Swing Recovery 210
Chapter 12 219
Join us at MVPDays and meet great MVP’s like this in person 219
Live Presentations 219
Video Training 219
Live Instructor-led Classes 220
Consulting Services 220
The Leanpub 60 Day 100% Happiness Guarantee
Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.
Now, this is technically risky for us, since you'll have the book or course files either way. But we're so confident in our products and services, and in our authors and readers, that we're happy to offer a full money back guarantee for everything we sell.
You can only find out how good something is by trying it, and because of our 100% money back guarantee there's literally no risk to do so!
So, there's no reason not to click the Add to Cart button, is there?
See full terms...
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase
We pay 80% royalties on purchases of $7.99 or more, and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98. You earn $8 on a $10 sale, and $16 on a $20 sale. So, if we sell 5000 non-refunded copies of your book for $20, you'll earn $80,000.
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earned over $14 million writing, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free.
If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub
You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.