Microsoft Defender, Purview DLP, Sentinel and Splunk engineering for small businesses

Security Automation Build

£1,500.00
Skip to product information
Microsoft Defender, Purview DLP, Sentinel and Splunk engineering for small businesses

Security Automation Build

£1,500.00

Automate the repetitive security jobs eating your team's time. I build them with Azure Logic Apps, Python, PowerShell or Splunk SOAR, the same tools I use to automate Defender operations for a major UK bank.

Example automations

  • Alerting your IT team when Defender quarantines files or detects a new threat
  • Applying indicators of compromise (IOCs) to Defender automatically
  • Handling exclusion requests, including an AI-assisted risk score for each one
  • Auto-assigning devices to the right Defender device groups
  • Raising an incident when one of your automations fails, so nothing breaks silently
  • Scheduled KQL hunting queries with results emailed or posted to Teams

What's included

  • One automation scoped, built, tested and deployed in your environment
  • Documentation and a handover walkthrough

Please get in touch before ordering so we can agree the scope.

You may also like