Archive
ClickFix Forensics: Proving Execution Beyond the Browser
LAPS: The Local Administrator Password Solution For Windows Devices In Entra ID.
SOC Casefile: Microsoft 365 Account Compromise Investigation.
Deploying Level RMM Using A Microsoft Intune Platform Script.
Attack Simulation Training - Microsoft Defender for Office 365 (MDO)
Bypassing Microsoft Intune Compliant Device Conditional Access Requirements Using TokenSmith
How Adversaries Execute AiTM Phishing Campaigns (A Practical Demonstration Using Evilginx3)
Auditing Microsoft Entra Authentication Methods with Microsoft Sentinel and Azure Logic Apps
Automating Azure NSG Inbound Rules for Dynamic IPs Using DDNS and PowerShell Runbooks
Understanding Azure Permissions: A Practical Guide
Monitoring DNS Record Changes in Microsoft Sentinel
Cisco Umbrella: Entra ID IdP Federation Setup & Azure Sentinel SIEM Integration
Understanding MTTA and MTTR in Cyber Security Operations.
Privileged Identity Management: Securing Just-In-Time (JIT) Access For Privileged Roles.
Become a Microsoft Ninja: All the Free Microsoft Security Training in One Place.
Microsoft Azure Lighthouse: Sentinel Across Multi-Tenant Environments.
Microsoft Sentinel Rule Not Saving? - Here's Why (ETag Errors).
Kusto Query Language (KQL) Queries For SOC Investigation.
Interactive Microsoft Sentinel Incident Notifications in Teams via an Azure Logic App Using Adaptive Cards.
Restoring Microsoft 365 Defender Features with Enhanced Filtering for Connectors (EFC)
Using AbuseIPDB in Microsoft Sentinel for IP Reputation and Threat Enrichment.
Preventing Risky OAuth Consent: How to Stop Users Granting Access to Unverified Apps in Microsoft Entra ID.
The Role of SPF, DKIM, and DMARC in Email Authentication Security.