Thousands of customers have tested or deployed Microsoft Entra ID Governance since it launched on July 1, 2023, seeing the value in governing the identities of their workforce. Many of those customers have asked about extending this governance to the identities of their business guests—contractors, partners, and external collaborators—to more fully follow least privilege access […]

Are you using MDE and have developers in your organisation using Windows 11? If the answer is yes to both, did you know that Microsoft has added a new storage volume called Dev Drive to improve performance for key developer workloads. Dev Drive builds on ReFS technology to employ targeted file system optimizations and provide […]

In this blog, we will automate the provisioning of Azure resources and configure them to monitor our workload and generate Sentinel alerts in a no-touch approach.

Welcome to the sixth article in our series on Microsoft Defender for Identity (MDI). As cyber threats continue to evolve, the need for robust security solutions has never been more critical. Over the course of this series, we’ve explored the foundational concepts of MDI, its integration strategies, and its role in fortifying organizational security. Today, […]

We are pleased to announce that Microsoft Purview’s keyword highlighting feature (currently available for Sensitive Information Types) will soon be generally for built-in trainable classifiers. Keyword highlighting allows you to quickly locate the text in your files that trigger positive matches to those trainable classifiers. By being able to rapidly identify the causes of these […]

increase in interest regarding Microsoft Information Protection, specifically Sensitivity Labelling and Data Loss Prevention. If you are unfamiliar with these solutions or want to learn more about them. This guide includes real-world examples and practical tips to help you effectively design and deploy the solutions.

We most likely all know passwords don’t have a future and therefore I’m happy more and more companies embrace authentication options without using a password (passwordless). One of the companies that is at the forefront of this is Microsoft, at least on Windows (of course on Windows). Microsoft supports passwordless authentication options like Windows Hello […]

At the end of September 2023, Microsoft Entra ID Protection received a new pretty cool feature that brings hybrid users to the same level of protection and auto-remediation as cloud users. The ability to remediate risk in Microsoft Entra ID Protection (former Azure AD Identity Protection) has been there for years already but in a […]

We’re excited to share the public preview of delegating Azure role assignment management using conditions. This preview gives you the ability to enable others to assign Azure roles but add restrictions on the roles they can assign and who they can assign roles to.  As the owner of an Azure subscription, you likely get requests […]

This weekend with Okta support system being compromised and has led to many corporate using Okta to start scrambling to check if there are any unauthorized intrusion from the Okta support ID. In today’s context, threat actors are frequently targeting service provider support staff to conduct social engineering attack and used the compromised credential to […]

oken theft using Adversary-in-the-middle phishing attacks is, according to the Microsoft Digital Defense Report 2023 and many other sources, on the rise. It’s relatively easy to execute and without the right set of skills and tools it can be difficult to detect. Many organizations are not prepared on how to respond. While there are a […]

Additional details about basic malware analysis in Microsoft Defender for Endpoint

The way people conduct their work has undergone a transformation. Rather than adhering to conventional office setups, individuals now have the flexibility to work from virtually any location. As applications and data make their way to the cloud, there arises a need for a contemporary workforce to have a security infrastructure that is both identity-aware […]