I usually don't drink on weekdays, but hear me out: Over the weekend, I thought about a common conditional access misconfiguration I often see in the wild. I decided to write a blog post about it, but that got me thinking: Is that the best way to reach as many tenant admins as possible? That gave me the following idea: What if I write a 🔥Maester test for it? Now, as a non-developer, that might be out of your comfort zone, but with the help of @merill and @Thomas_Live, I quickly got this new test added to the existing repository, ready to hit hundreds or thousands of tenants. Dare to (th)(dr)ink different. 🔥 📖 [Blogpost] janbakker.tech/conditional-a… 🚀 [Contribute to Maester] maester.dev/docs/contributin…

✨ Session Announcement: Build your security data lake with Microsoft Sentinel & Data Explorer; a match made in Azure! ☁️🔐✨ 🎤 Get ready for a VIP experience with the legendary @KoosGoossens, Microsoft Security MVP & Cloud Wizard @ Wortell! He's spilling the tea on turbo-charged, budget-friendly log storage tricks that'll have your data spinning into the future. 🗓️ March 5, 2025 - mark your calendars for an epic showdown of code and Hollywood glamour at VUE! 🎥💫 🎟️ VIPs, let's light up the cloud! 💥🚀 Tickets are flying - catch yours now and join the hype! 🎉👇 conference.expertslive.dk #ELDK2025 #ExpertsLiveDK #Microsoft #Community #Security #Azure #AI #ModernWorkplace #Intune #DevOps #Automation #M365 #PowerPlatform #Data #Purview #Development #OpenAI #Copilot #AVD #W365 #Identity #Entra ELDK2025 Organizers: Morten Knudsen (@knudsenmortendk) Thomas Poppelgaard (@_POPPELGAARD) Martin Byskov (@ByzzByskov) Henrik Wojcik (@henrikwojcik) Heine Madsen (@HeineKoldbro) Kent Agerlund (@agerlund)

Investigating Microsoft 365? The Unified Audit Log (UAL) is your go-to for tracking user and admin activities. Learn how to leverage it for security insights and compliance. 🔍 Read more: cyberdom.blog/microsoft-365-…

I put some notes here that hopefully explain it - github.com/reprise99/4688-sy…

One of our very smart Active Directory experts has been putting together a series of blog posts about hardening AD. Already into its 7th installment, it covers SMB hardening, disabling NTLMv1, least privilege and more. Check the series out - techcommunity.microsoft.com/…

Great reminder for anyone wanting to enrich their Kusto queries with additional information. If you are after enrichment such as geo info for IPs, ASN lookup info, tor exit node data and more, then have a look below. The KQL is already written for you - firewalliplists.gypthecat.co…

A new dedicated resource application to enable Active Directory to Microsoft Entra ID sync using Microsoft Entra Connect Sync or Cloud Sync is coming 😱 In the announcement the mentioned reason is "upcoming security hardening"... 6bf85cfa-ac8a-4be5-b5de-425a0d0dc016 #EntraID

everyday df3ndr episode 01x01 is out now! df3ndr.io/episodes/2024/12/1… /cc @KoosGoossens

@KoosGoossens and I have been working on this for a few months now and while he is away at ESPC24 in Stockholm this week, I thought I'd share this intro - df3ndr.io/episodes/2024/12/0… Join us for the first of many episodes, coming soon to your favorite podcast player.

For all #KQL fans, I had this list of community repos lying around, the list now consists of 33 repos for you to investigate. Happy hunting! 🏹 Feel free to send a PR if you miss repos! :) github.com/Bert-JanP/Hunting…

New blogpost! Learn how to register Yubikeys on behalf of your users! janbakker.tech/register-yubi…

The latest @TheCloudArch episode is now live - thanks to @KoosGoossens @jeroenniesen @maarten_goet for being our guests (and cooking dinner!) - Episode 92: Dutch! (thearchitects.cloud)

Who doesn't want to learn about #security? 😃 Come to #ExpertsLiveEU to hear from @KoosGoossens and learn how to build your security data lake with #MicrosoftSentitel & #DataExplorer: a match made in #Azure. 📅 Sept 24-25 Main Conference 📌 Budapest, Hungary 🔗 expertslive.eu

Wrote a new blog on how to set up Microsoft Defender for External Attack Surface Management. Hope it’s of use to someone out there. security-ninja.com/post/conf…

Run PowerShell in a Logic Apps That's a game changer and will make it possible to use logic apps even for more complex tasks techcommunity.microsoft.com/…

RansomCow 🐄

Are you using @evilginx to phish WHfB users? It's going to be picked up by Entra ID Protection. If you are a Microsoft customer with P2 and not deploying a Risk Based conditional access policy then your are not protected...

Where would the #community be, without our amazing sponsors that truly believe in the power of #conferences, want to support the #Microsoft community, position their brand in the heart of Europe amongst #IT Professionals - and are excited to show you their #products & #services through live #demos! A special round of applause and THANK YOU to our amazing #GoldSponsors of Experts Live Europe 2024: @ExpertsInside @easylife_365 @GetTechio @NiCE_IT_Mgmt @Kelverion_ @squared_up @RecastSoftware @PatchMyPC @swc_dk @Lenovo While Gold is sold out, we have Silver packages available with a booth in the expo hall - check out expertslive.eu/sponsors for more info and get in touch with us today! #ThankYou #GoldSponsors #CommunityPower #Microsoft

Wanna learn #KQL? Join me on September 2nd at @OrangeCon_nl! I will be hosting a training for newcomers to 𝘒𝘶𝘴𝘵𝘰 𝘘𝘶𝘦𝘳𝘺 𝘓𝘢𝘯𝘨𝘶𝘢𝘨𝘦, tailored for individuals working in the Microsoft security field. Use 𝟰𝗞𝗤𝗟𝗛𝗘𝗥𝗢 to get € 100 off orangecon.nl/

#ExpertsLive is about bringing people together from all over the world, creating a space where we help each other to learn more about #tech solutions, as well as #mentoring, #coaching, creating #friendships, building #business relations, meeting with Microsoft experts, #MVPs, the #community, and combined with exchanging tech know-how - we're also all about making learning #FUN! Don't miss out on the excitement happening this September 23-25, 2024 in #Budapest. Register now at expertslive.eu and connect with 50 speakers including: @paulismama | @codewithsimon | Samantha Alleyne | Peter Szabo | @koosgoossens | @Joylynn_Kirui | @kgreeneit | @Lehman__Holly and many more! #ExpertsLiveEU #ELEU24 #CommunityPower #TechKnowHow #Skills