20. 進階安全性管理 (ASM) How alerting works
Users Admins Microsoft
Admins
Audit Data
Service
Event enrichment
Big data and machine learning
based alerts engine
Anomaly detection
Activity policy evaluation
Alert investigation & notification
Advanced Security Management Portal
SIEM connector
You have mail! SMS
35. • AI in Office 365, 讓你工作學習效率 UP!
• Microsoft Teams 隨時掌握討論進度,團隊
訊息不漏接
AI in Office 365 + Microsoft Teams = 校園最佳法寶
Notes de l'éditeur
Microsoft 365 focuses on four key areas.
Creativity and teamwork, are about unlocking the potential of every individual, to drive innovation in the organization.
And we are focused on creating the lowest TCO environment by integrating for simplicity, and having intelligent security, built-in.
NOTE TO SPEAKER: Keep in mind that most people, when they hear “Office 365”, only hear “Office” and think “Word, PowerPoint, Excel”. And when they hear “cloud”, they think “Online” only, thinking this is only a browser-based version of Office, similar to Google Apps. So it’s important to take your time and labor on these 2 points specifically.
Talk track
Office 365 is your complete office in the cloud.
When we say “complete office”, first of all, we mean the Office apps that you know and love – Word, PowerPoint, Excel, Outlook, downloadable onto up to 5 PCs/MACs and mobile devices per user. With Office 365, you get these same apps as you have always used them, as rich desktop apps. The difference is, you are now subscribing to Office, instead of downloading a single version onto a given PC. This means you will always get the latest version of these Office apps on your desktop (for use whether you are online or offline), but also Office Online for editing in the browser and Office Mobile on your smart phones for viewing and editing on the go.
But Office 365 also gives you so much more. You get Office, [click] plus all the services and benefits of the cloud. This means cloud-based productivity services hosted by Microsoft, including business-class email, file sharing, HD video conferencing, all working together and connected to Office so you have anywhere access to everything you need to run your business. Our SMB targeted offerings in particular offer simple IT management, and all Office 365 subscriptions offer a financially-backed SLA and 24/7 technical phone support for critical issues.
Office 365 is your complete office in the cloud and the best way to acquire the new Office. <CLICK>
Yair
Activities are fetched via the activity APIs on a continuous basis every few seconds, querying for new activities. This way, the service can analyze and present activities within seconds of occurrence, however apps with built-in delays in the APIs like Office365 will still experience these delays.
The first step is to create a common language so all events are stored according to a consistent format allowing “file download” and “Login” to be the same across apps. The second step is to enrich the events with geo-location data and correlate with Microsoft threat intelligence. This integration is critical since it allows us to leverage the power of Microsoft intelligence as a built in capability, imagine that for any company in the world which is undergoing a phishing attack on Office365, we can immediately detect if any of our users had recent access from these locations.
After enrichment, the events are sent for policy evaluation. If the event violates any of the activity policies, it is tagged as a violation and will trigger an a alert.
Once an alert is triggered, it appears in the alert center which allows for further investigation. Alerts can also be send via email or SMS as well as integrated with 3rd party systems and SIEM solutions.
Streamline with advanced data analysis
The eDiscovery process often involves sorting through thousands of email messages, documents, and other data to find the small number of files that may be relevant. Office 365 Advanced eDiscovery integrates Equivio machine learning, predictive coding, and text analytics to reduce the costs and challenges of sorting through large quantities of data.
Enhanced focus on what’s relevant
Office 365 Advanced eDiscovery reduces the volume of data by finding near-duplicate files, reconstructing email threads, and identifying key themes and data relationships. You can also train the system to intelligently explore and analyze large, unstructured datasets and quickly zero in on what’s relevant. Finally, you can export this data to third-party applications for review.
Providing security, transparency and compliance in Office 365 is our top priority. Customer Lockbox for Office 365 can help your customers meet compliance obligations for data access authorization with logging and auditing controls.
Meet Compliance Needs
Customer Lockbox can enable customers to meet compliance needs by demonstrating that they have procedures in place for explicit data access authorization.
Customer Lockbox can help customers meet controls in regulations such as in HIPAA and FEDRAMP.
Extended Access Control
Use Customer Lockbox to control access to customer content for service operations.
Customers who initiate the original request will grant final approval access to the Microsoft engineer. Customers have visibility into the purpose and length of access. Access to customer content will be revoked when service operation is completed.
Visibility into Actions
Actions taken by Microsoft engineers in response to Customer Lockbox requests are logged and accessible via the Management Activity API or the Security and Compliance Center.
Microsoft 365 focuses on four key areas.
Creativity and teamwork, are about unlocking the potential of every individual, to drive innovation in the organization.
And we are focused on creating the lowest TCO environment by integrating for simplicity, and having intelligent security, built-in.