Home

16/11/2023

Safeguarding Your Business: Combating EvilGinx and MFA Bypass with Conditional Access Phishing Resistance

By Stephen Hackers in 2FA, MFA, Certificates, Cloud Security, Conditional Access, Cyber Security, Dark Web, Endpoint Manager (Intune), Enterprise Mobility, Enterprise Security, Enterprise Security, Identity and Services, Microsoft, Office 365, Office Apps & Services, Office365, Phishing, Phishing Email, Security & Compliance, Security & Compliance Tag CA, Conditional Access, CyberSecurity, Defensive Security, EvilGinx, M365, MFA, Microsoft, Phishing, Phishing Emails, Scam, Security

In an era dominated by technological advancements, the rise of cyber threats poses a substantial risk to businesses and individuals alike. One such threat is EvilGinx, a sophisticated man-in-the-middle software…

09/11/2023

Mastering Microsoft’s SC-400 Exam: Your Ultimate Guide

By Steve in Alerts, Alerts, Enterprise Security, Exchange, Management Locks, Microsoft, Microsoft Azure, Office 365, Roles, Users and Groups, Security & Compliance, Security & Compliance Tag Compliance, DLP, Exam, Information Protection, Labels, Microsoft, Purview, SC-400, Study Guide

If you're looking to prove your expertise in securing and protecting Microsoft 365 workloads, passing the SC-400 exam is your key to success. Microsoft's SC-400, “Administering Information Protection and Compliance…

10/10/2023

Navigating the SC-200 Exam: Your Comprehensive Guide

By Stephen Hackers in Alerts, Alerts, Azure AD, Azure Monitor, Azure Security, Conditional Access, Enterprise Security, IAM, Identity and Services, Identity Protection, Key Vault, Logs, Microsoft, Microsoft Azure, Networks, Roles, Users and Groups, Security & Compliance, Security Center Tag Analyst, Certification, Exam, Microsoft, Microsoft 365, Microsoft Azure Security Technologies, Microsoft Purview, Microsoft Security, Operations, Prep, SC-200, Security, Study

Introduction: Gearing up for the SC-200 exam? Microsoft's SC-200 exam, also known as the Security Operations Analyst certification, is designed to validate your skills in managing security alerts, responding to…

13/02/2023

Get ACL Permissions for a specific OU

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cyber Security, Microsoft, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

# Get ACL Permissions for a specific OU (Get-ACL "AD:$((Get-ADOrganizationalUnit -Identity 'OU=Computers,DC=Test,DC=LOCAL').distinguishedname)").access | Select IdentityReference,AccessControlType,ActiveDirectoryRights.IsInherited #Other examples available from https://www.easy365manager.com/how-to-document-ou-delegation/ https://shellgeek.com/get-ad-ou-permissions-report/

01/02/2023

Query Active Directory – Security Script

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

PowerShell script to query active directory : Identify Accounts with Password expiring is disabled Identify Accounts have not logged on for 30 or 90 days and accounts have never logged…

05/01/2023

Purview – eDiscovery, and Investigations – How to guide

By Steve in Enterprise Security, Enterprise Security, Microsoft, Office365, Security & Compliance, Security & Compliance Tag Compliance, eDiscovery, How to guide, Investigation, Microsoft Purview, Search

Create a Case - eDiscovery (Standard) - Microsoft Purview You will require the role eDiscovery Manager or eDiscovery Administrator Assign eDiscovery permissions in the Microsoft Purview compliance portal - Microsoft…

04/11/2022

EoL Software, Cyber Security, or a Business Issue?

By Steve in Hot Wired IT Solutions

If a piece of software is End of Life (EoL), should you upgrade immediately? Is it an instant Cyber Security or a Business issue? To understand the challenges/issue, conduct a…

26/07/2022

Microsoft SC-200 Security Operations Analyst – Study Notes

By Steve in Alerts, Alerts, Azure AD, Azure Monitor, Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Externsions, IAM, Identity and Services, Key Vault, Logs, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, Office365, Roles, Users and Groups, Security & Compliance, Security & Compliance, Security Center Tag Certification, Cyber, Exam, Exam Prep, Microsoft, SC-200, Security Analyst, Security Operations, Study Guide, Study Notes

Defender for Identity entity tags in Microsoft 365 Defender https://docs.microsoft.com/en-us/defender-for-identity/manage-sensitive-honeytoken-accounts Using role-based access control (RBAC) https://docs.microsoft.com/en-us/learn/modules/deploy-microsoft-defender-for-endpoints-environment/4-manage-access Manage portal access using role-based access control https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide Safe Attachments policies in Microsoft Defender…

16/06/2022

Import Reg Key To Remote Computer

By Steve in DevOps, Microsoft, Microsoft Windows 10, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell, Windows 7, Windows Development Tag Computer, Import, Invoke-Command, PowerShell, Registry, Remote, WinRM

Challenge : Import reg key settings to a remote compute Requires WinRM to be running Execute as Administrator **This script worked when tested on a Window 2021 server to a…

09/06/2021

NIST Cyber Security Professional.. things to remember

By Steve in Cyber Security, Enterprise Security Tag 7-Step, CIIS, Cyber Security Framework, Digital Transformation, Functions, NIST, NIST-CSF, Risk Assessment, Risk Management

Digital Transformation + Cyber Security = Success Digital Transformation. What to focus on: Customer Experience -> Operational Efficiencies -> New Revenue Streams -> Rapid Response to Change What is NIST-CSF…