Dennis Lind

Microsoft Entra Kerberos authentication for Cloud-only Identities on Azure Files SMB ❤️ Azure Files now allows SMB access through identities that exist entirely in Entra also known as cloud-only accounts. These accounts live in…

🔥 It is here. Microsoft Entra Kerberos authentication for cloud only identities on Azure Files SMB is now available in preview. This makes it possible to access Azure Files without any domain controllers or hybrid identity requirements. cloudtips.nl/microsoft-en...

Using a managed identity for your multi-tenant application is back!! svrooij.io/2024/12/24/m... This is huge security wise. If you build a multi-tenant application for #Microsoft365 you want to keep the secrets, safe. Now you can get rid of those secrets all together. #security #entraid

Don't want to be the grinch in this festive season but 🚨 URGENT 🚨 announcement related to Azure CDN from Edgio which you need to migrate off NOW because of the Edgio bankruptcy. Please share and act.

Video of detail and actions.

youtu.be/QNIESfQno8U

Thank you!

‼️ The app Azure Active Directory PowerShell is also used by the AzureAD PowerShell module which will no longer be supported after March 30, 2025, but its retirement will happen in early July 2025.

Be prepared in January already.

🚨 MSOnline retires between early April and late May.

🚨 A series of temporary outages between Jan and Mar (3-8h x2).

🚨 Inspect Sign-in logs (interactive and non-interactive) where Application Name is Azure Active Directory PowerShell.

Please swedish too 🤣

holy crap, me too

Is it possible to tag Microsoft (or any external) apps so customers know it’s out of their hands?

Thanks! What does that mean in this case? Will they stop working? Can we not send these scary messages to people if there’s nothing we can do about it? I have questions 🤣

Loving the new Entra recommendation to get the hell off AzureAD Graph but.. how do I fix these? @merill.net ? 😇

Old but gold 💰 Receive admin notification emails from Microsoft Entra without a mailbox license using 𝐩𝐥𝐮𝐬 𝐚𝐝𝐝𝐫𝐞𝐬𝐬𝐢𝐧𝐠! Check out how here > ourcloudnetwork.com/how-to-recei...

#Entra #Admin #Graph

I had a customer ask me if they can block an app and disable sign-ins even from non-human identities.

The answer is Yes!

The label 'Enabled for users to sign in' in the admin portal is slightly misleading and could probably be improved.

FYI internally it's called 'enabled' 😉

Soo... A little bit of awareness is probably a good idea :p

We can delete MDI sensors from the Defender portal and do so in bulk via the internal API

It might be a good idea to set up a detection for this:

CloudAppEvents
| where ActionType == "SensorDeleted"

This is an issue with all extensions, no? Not just VS Code. Although developers are known to do basically anything if it brings features. 🤣

Is there a way to block the usage of unknown extensions like with browsers?

They all have Defender enabled but in passive mode in this case so I shouldn’t bump into any more issues than I already have (I hope 😁)

Really? I only cut one off the list I was given but it was no problem other than finding out Defender KB for platform update was missing, so I had to install that first and reboot 🥲

How did you know I was currently working on installing MDE in downlevel servers? 😂

Familiar with the tools already but very interesting to hear the story behind them, great episode! 🥳

Did you use a VPN and thought you were safe again? 🥶

I know what I’m listening to omw to work tomorrow! 🤓 those are all great tools, can’t wait for less hectic days so I can contribute more to Maester

Also, who can run this by default? That’s a lot of info 🥶

Function Invoke-Whoami {} 🤣

This is why we follow the both of you 😁

Anyone else having issues with DfC reporting on vulnerable OpenSSL in the latest versions of Azure Monitoring Agent? 😞 Secure Score taking hits

If anyone else was looking for the ultimate place for announcements (Book of News), here it is.

And don’t forget to use the table of content instead of scrolling the Wall of Text… 😅

news.microsoft.com/ignite-2024-...

YouTube video by John Savill's Technical Training FREE Azure Services for NON-Azure Windows Servers Covered by SA Powered by Azure Arc!

Quick video covering the huge update that gives you a number of Azure management services for FREE on your SA non-Azure Windows Server. Patching, inventory, change management, policy and more!
youtu.be/7EnbSjWb6io

#azure #cloud #microsoft #cloudcomputing #microsoftazure #windowsserver #azurearc

Microsoft Security Exposure Management is now GA with some neat features

Attack Path Analysis with support for
◻️DACL
◻️Hybrid Attack Paths
and also #uRBAC support

#Ignite #XDR

https://buff.ly/3ZeN91K

@merill.net @jeftek.com uhm there are some refs to aks[.]ms in the new Book of News, that domain is potentially up for grabs 🤓