One of my customers have seen an interesting campaign, and they wanted help detecting and remediating it.

In this place, you can find all gathered necessary and useful open-source investigating (OSINT) tools on the internet.

Microsoft Defender for Cloud Apps is now part of Microsoft Defender XDR – Microsoft Defender XDR will be the home for monitoring and managing security across your Microsoft identities, data, devices, apps, and infrastructure. – SOC analysts will be able to triage, investigate and hunt across all Microsoft Defender XDR workloads, including cloud apps. – […]

We want to import Conditional Access policies into the Microsoft Entra tenant. Now, we can restore Conditional Access policies using the Microsoft Entra admin center. But that’s a single Conditional Access policy upload. What if you have multiple Conditional Access policies that you want to import? PowerShell is the easiest and fastest way. In this […]

Hi defenders, At Microsoft Ignite 2023, Microsoft introduced Microsoft Copilot for Microsoft 365 that uses Large Language Models (LLMs) and your enterprise data to provide powerful intelligent assistance capabilities. In this blog we are going to explore how to use Microsoft Copilot Studio to develop your first Copilot, integrate it with Microsoft Teams and Monitor […]

In the dynamic landscape of software development, developers across diverse organizations are embracing a wide variety of Source Code Management (SCM) and CI/CD pipeline systems to optimize their workloads. While this trend presents flexibility, collaboration, and speed to software development, the challenges of securing the application lifecycle become increasingly complex. As organizations strive to improve […]

Lately, there has been a lot happened/ changed/ introduced in the Microsoft Entra ID Governance space and this is one of my favorite topics to write and explain as well. The main reason is that Entra ID Governance features are all interconnected and organizations can easily create an eco-system and start using its features. Not […]

Threat intelligence reports are an essential source to be able to identify and mitigate security threats. However, the process of converting the information in these reports into actionable queries (such as Kusto Query Language (KQL)) can be challenging. In this blog post, we will explore the steps involved in going from a threat intelligence report […]

Microsoft Entra Global Secure Access brings a new control to Conditional Access. By installing the Global Secure Access Client on (hybrid) Entra joined devices and enabling Global Secure Access signaling for Conditional Access, admins can now work with a new condition: All Compliant Network locations (Preview)

We’re all using zero trust – but are we using it well? Richard talks to Nicolas Blank about his work helping to develop the Zero Trust Adoption Framework. Nicolas talks about resisting the buzzword effect and avoiding looking at zero trust as a set of products because it isn’t – it’s really about the people […]

This fourth part of the ‘hidden gems’ in Entra ID Governance Access Packages will look at how we can delegate some access package management from IT to the business or stakeholders so IT can focus on what really matters: ‘Adding new features and empower the business to do more themselves’. At last, we will look […]

After COVID, with more virtual meetings happening, it’s really important to make sure the confidentiality of online meetings. As we’re aware, Microsoft Teams has enhanced its security measures by implementing end-to-end encryption (E2EE) for 1:1 calls. Well, they didn’t stop with that but also went a step further and added that same strong security to […]

Karl started working on a function that could be added to a Linux container-based Function App to decrypt the container startup context that is passed to the container on startup. As he got further into building the function, he found that the decrypted startup context disclosed more information than we had previously realized.

So, Daniel decided to write his own Conditional Access evaluation engine in PowerShell, like one does on rainy November nights, right? Its purpose is to provide capabilities similar to the built-in What If tool in the Entra ID portal, but with a clear focus on finding grant control gaps in common an uncommon use cases. […]

Are you tired of dealing with the hassles of managing your Active Directory Federation Services (AD FS) applications? Do you want to enjoy the benefits of a modern, secure, and cloud-based identity platform? If so, Microsoft has some great news for you, a new tool feature – AD FS Application Migration – is here to […]