Category Cloud Security

16/11/2023

Safeguarding Your Business: Combating EvilGinx and MFA Bypass with Conditional Access Phishing Resistance

By Stephen Hackers in 2FA, MFA, Certificates, Cloud Security, Conditional Access, Cyber Security, Dark Web, Endpoint Manager (Intune), Enterprise Mobility, Enterprise Security, Enterprise Security, Identity and Services, Microsoft, Office 365, Office Apps & Services, Office365, Phishing, Phishing Email, Security & Compliance, Security & Compliance Tag CA, Conditional Access, CyberSecurity, Defensive Security, EvilGinx, M365, MFA, Microsoft, Phishing, Phishing Emails, Scam, Security

In an era dominated by technological advancements, the rise of cyber threats poses a substantial risk to businesses and individuals alike. One such threat is EvilGinx, a sophisticated man-in-the-middle software…

01/02/2023

Query Active Directory – Security Script

By Stephen Hackers in Active Directory, Batch Scripts and PowerShell, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Server 2016, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Powershell Tag Active Directory, Identify Weakness, Improve Security, Monthly Security Checks, PowerShell, Query, Security

PowerShell script to query active directory : Identify Accounts with Password expiring is disabled Identify Accounts have not logged on for 30 or 90 days and accounts have never logged…

26/07/2022

Microsoft SC-200 Security Operations Analyst – Study Notes

By Steve in Alerts, Alerts, Azure AD, Azure Monitor, Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Externsions, IAM, Identity and Services, Key Vault, Logs, Microsoft, Microsoft Azure, Office 365, Office Apps & Services, Office365, Roles, Users and Groups, Security & Compliance, Security & Compliance, Security Center Tag Certification, Cyber, Exam, Exam Prep, Microsoft, SC-200, Security Analyst, Security Operations, Study Guide, Study Notes

Defender for Identity entity tags in Microsoft 365 Defender https://docs.microsoft.com/en-us/defender-for-identity/manage-sensitive-honeytoken-accounts Using role-based access control (RBAC) https://docs.microsoft.com/en-us/learn/modules/deploy-microsoft-defender-for-endpoints-environment/4-manage-access Manage portal access using role-based access control https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide Safe Attachments policies in Microsoft Defender…

26/02/2021

Azure Conditional Access Integration with Google Chrome

By Steve in Azure Security, Cloud Security, Conditional Access, Externsions, Google, Group Policy, Microsoft, Microsoft Azure, Office Apps & Services Tag Azure AD Joined, Azure SignIn, Block, Chrome, Chrome Extension, Google, Join Type, Managed Device, Non Compliant Device, Windows 10 Accounts

Scenario: Anyone using MCAS, Conditional Access, Window 10 Endpoints and Google Chrome. Challenge: How do you get Google Chrome to be recognised by Azure Conditional Access policies. Issue : Azure…

20/07/2020

Security Is a Hugely Strategic Area For VMware:…

By Steve in Cloud Security, Cyber Security, Enterprise Security, VMware Tag Security, Strategic, Vision, VMware

Video discussion about VMware and their recent acquisition, security company Octarine. #Security #VMware #OctarineSecurity Is a Hugely Strategic Area For VMware:...VMware recently acquired yet another security company Octarine. The acquisition…

22/06/2020

Microsoft Azure Security – Study Notes

By Steve in Advisor, Alerts, Alerts, App Service, Azure AD, Azure Container Registry, Azure Monitor, Azure Security, Blueprint, Cloud & Datacenter Management, Cloud Security, Conditional Access, Content Trust, Cyber Security, Enterprise Security, Enterprise Security, Externsions, Hot Wired IT Solutions, IAM, Identity Protection, Key Vault, Kubernetes, Logs, Management Locks, Microsoft, Microsoft Azure, Networks, Powershell, Roles, Users and Groups, Security & Compliance, Security Center, Storage Tag AZ-500, AZ500, Azure, Azure Security, Exam, Microsoft, Microsoft Azure Security Technologies, Prep, Study Notes

A collection of all my study notes and lab work while working towards passing the badge Microsoft Certified Security Engineer Associate by passing the AZ-500 exam These notes are in…

04/06/2020

MS-101: Microsoft 365 Mobility and Security – EXAM PASSED!!!

By Steve in Business Applications, Cloud & Datacenter Management, Cloud Security, Cyber Security, Endpoint Manager (Intune), Enterprise Mobility, Enterprise Security, Exchange, Hot Wired IT Solutions, Microsoft, Mobility and Security, Office 365, Office Apps & Services, Powershell, Security & Compliance Tag 365, Exam, Microsoft, Microsoft 365, Mobility, MS-101, MS101, MS365, Passed, Security

MS-101: Microsoft 365 Mobility and Security EXAM PASSED!!! #MS365 #Security #365Security #CertifiedProfessional #CloudSecurity #CloudFamily #CyberSecurity #Microsoft365 #MicrosoftCloud #Microsoft #alwaysbelearning #MS101 #EXAM #PASSED

03/06/2020

Microsoft 365 – Audit Log Search – UserLoginFailed

By Steve in 2FA, MFA, Cloud & Datacenter Management, Cloud Security, Cyber Security, Dark Web, Enterprise Security, Enterprise Security, Exchange, Microsoft, Office 365, Office Apps & Services, Security & Compliance, Security & Compliance Tag Activity, Audit Log, CyberSecurity, Email, Filter, M365, Pwned, RaisingAwareness, Search, Security, User Login Failed, UserLoginFailed, Whois

M365 Admin Portal > "Security & Compliance" > "Search">"Audit log search" Learn more about searching the audit log https://protection.office.com/unifiedauditlog Audit log search, a great place to start regularly checking for…

27/05/2020

AZ-500: Microsoft Azure Security Technologies – EXAM PASSED!!!

By Steve in Azure Security, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Hot Wired IT Solutions, Microsoft, Microsoft Azure, Security & Compliance Tag AZ-500, Azure, Certified, Exam, MCP, Microsoft, Microsoft Azure Security Technologies, Passed, Security, Stephen Hackers

AZ-500: Microsoft Azure Security Technologies EXAM PASSED!!! #Azure #Security #AzureSecurity #CertifiedProfessional #CloudSecurity #CloudFamily #CyberSecurity #MicrosoftAzure #MicrosoftCloud #Microsoft #alwaysbelearning #AZ500 #EXAM #PASSED

25/05/2020

Azure – Setup Azure Blueprints

By Steve in Azure Security, Blueprint, Cloud & Datacenter Management, Cloud Security, Cyber Security, Enterprise Security, Enterprise Security, Microsoft, Microsoft Azure, Security & Compliance Tag ARM, Azure, Blueprint, Example, How to, Policy, Publish, RBAC, Resource Groups, Roles

Challenge: Separate subscriptions for multiple disciplines under the same Azure Active Directory Tenancy. Required : Each subscription to have the same role assignments Solution : Azure Blueprints to define a…