ITDR (MDR for Microsoft 365)

Hi team, for escalations when marking as expected we'd like to mark the specific IP rather than allowing the entire country. For example, one of our team members access our clients from Romania, I'd like to create an expected rule for that IPv4 without allowing Romania in it's entirety. Thanks,

Hey Everyone We would strongly recommend to put alerts in place when a Global Admin gets excluded from MFA. Our internal practice for this is good for change management, but unfortunately we several large co managed IT and have found repeatedly admin accounts get excluded from CA policies. Would like an alert if an admin is excluded, as well as another dashboard that tracks Admins without MFA specifically in addition to users. We feel like this is our biggest risk to tenant compromise so would like to get some hooks around it.

We have some clients that use Meshimer (A web content filter) below is a list of their IPs icdb.meshimer.com : 169.61.99.54 analyzer.meshimer.com : 169.61.99.53 remoterules.meshimer.com : 169.62.42.197 ia.meshimer.com : 66.165.234.14 droidproxbeta.meshimer.com : 2607:f0d0:3a01:ac::17 2607:f0d0:3a01:ac::11 2607:f0d0:3a01:ac::13 2607:f0d0:3a01:ac::8 2607:f0d0:3a01:ac::12 2607:f0d0:3a01:ac::16 2607:f0d0:3a01:ac::18 2607:f0d0:3a01:ac::15 android.meshimer.com : 169.61.99.58 droidprox.meshimer.com : 169.62.42.201 ios.meshimer.com : 169.61.99.57 ios2.meshimer.com : 169.61.66.234 169.61.66.238 169.61.66.237 169.61.66.235 169.62.42.204 169.62.42.205 169.61.66.236 169.62.42.206 meshimerid/ test.meshimer.com : 96.45.82.3 96.45.82.231 96.45.83.243 96.45.83.57 meshimer.com : 169.62.42.194 uptodate.livigent.com : 192.157.84.249