Identifying Malicious Emails in Inboxes practical365.com/identifying-ma… Thijs Lecomte

End-users Antispam settings is an unknown but important policy to configure within Exchange Online! #Microsoft365Defender #MDO

Nathan is speaking true! The past few months, we have been dealing with quality issues in #MDO, inconsistent logging in #MDE and missing some basic features overall. Yet, all we see is development in products that most organizations don't desire at the moment.

Awesome PIM overview! I am still waiting for support to request a full authentication when activating a role. Some integration of authentication context and sign-in frequency everytime would solve this. This would solve using a stolen token to activate a role.

Easy going Friday morning. Baby Duty ✅ Coffee ✅ New blog in progress ✅

With the announcement of #MicrosoftDefenderXDR, I wanted to share my thoughts on some of the current pain points in automation with #MicrosoftDefender and #MicrosoftSentinel in this blog 'My wishlist for automation within Microsoft Defender XDR' 365bythijs.be/2023/12/05/my-…

As the year is coming to an end, I take some time to look back at what has happened. A lot of new products (outside of E5) A lot of copilot And some detection/reliability issues Looking forward to what 2024 brings!

If you like in-depth articles, check out this one below! It covers, in great detail, how an attack in a cloud environment looks like and how to detect it. Including initial access, persistence, reconnaissance and privilege escalation.

Apps within Entra ID remain a security risk in a lot of companies... Check out the blog below on how you can protect your organization against it!

Excited to be speaking at @TeamsNation in February with Louis Mastelinck | LouSec | MVP We will be discussing a new type of Phishing using Microsoft Teams. What it is, how to protect against it and how to detect it. Join us in this free awesome event 👇 teamsbuzz.com/register

Hey! Did you Activativate your Azure PIM role already?? #AzureActivity #MicrosoftSentinelSnafu

This weekend, I deep dived into the Microsoft hack to see how it happened and what we learned from it. I linked it to the ENow Software 's Application Governance, which provides insightful recommendations into some common misconfigurations appgovscore.com/blog/insecure-…

Going live with Louis Mastelinck | LouSec | MVP in 10 minutes to talk about phishing attacks in Teams Join here => teamsbuzz.com/room2

Just released a new blog talking about a new CA feature which I have been waiting on for a long time. This allows us to better protect our administrator users against token theft and opens up new ways to secure critical applications. 365bythijs.be/2024/02/27/a-n… #entraid #ca

🚀 This week's newsletter just went out! Featuring posts from 👇 @charbelnemnom,Benoit HAMET,@msazureacademy,@ntfaqguy,CloudFirst Podcast,Rory Braybrook,@12knocksinna,@shehanperera85,@shaunhardneck,@crookedbong,@nviso_labs,Fabian Bader,@crookedbong,@12knocksinna,Thijs Lecomte 🧵⬇️

Excited to be taking the stage again, together with Louis Mastelinck | LouSec | MVP to talk about phishing in Microsoft Teams!

Are you struggling to add the correct data into #MicrosoftSentinel? Check out my latest article on Practical 365, detailing some tips and tricks I use. This is the first article of a small series, focusing on adding networking data into Sentinel.

Protecting Effectively Against Ransomware bit.ly/4k52Vnk #Ransomware #Security #ActiveDirectory Thijs Lecomte