Rob Winter

Latest Intune blog is up where we show how to add exclusions to Windows ASR Rules. #blueteam #cybersecurity #securebydefault #intune #microsoftsecurity strategic-cyber.co.uk/2024/09/03/mic…

The next guide is up in our #intune series "Mobile Application Policies for iOS". We show how you can control #byod devices with a simple set of policies. strategic-cyber.co.uk/2024/07/02/mic… #blueteam #cybersecurity #securebydesign

I'm getting email from pr people offering quotes from CEO's about "ban on the use of Kaspersky software." USE of the software IS NOT banned. New *sales* of the software is banned, and Kaspersky can't provide software updates to existing customers in US. But people can still use software if they want

#sentinel Part 2 out now as we continue to cover deployment from scratch. We look at using the free data feeds, and creating our first workbooks. #blueteam #cybersecurity #SIEM #SOAR #securebydefault strategic-cyber.co.uk/2024/06/19/mic…

This week we're looking at installing #microsoft #sentinel from scratch. Over this series we will start from the basics and free data sources, then progress onto more advanced configurations. #blueteam #securebydefault #cybersecurity strategic-cyber.co.uk/2024/06/10/mic…

Next #intune blog is up. hashtag#windows and Driver Updates. We look at #patchmanagement via Intune update rings #cybesecurity #securebydefault #blueteam Microsoft Intune 16 – Windows and Driver Updates. – @2codemonte (strategic-cyber.co.uk)

1. I'm legit shocked by the design of @Meta's new notification informing us they want to use the content we post to train their AI models. It's intentionally designed to be highly awkward in order to minimise the number of users who will object to it. Let me break it down.

Google Cloud accidentally deleted a company's entire cloud environment (Unisuper, an investment company, which manages $80B). The company had backups in another region, but GCP deleted those too. Luckily, they had yet more backups on another provider. theguardian.com/australia-news…

ANNOUNCING general availability!!! Microsoft Defender for Endpoint streamlined connectivity consolidates service URLs and provides IP ranges, for use in a variety of network scenarios. learn.microsoft.com/defender-endpo…

We do not want apps bypassing #MFA or #conditionalaccess in #sharepoint so this is an important setting to review, and implement if possible. #cybersecurity #blueteam #securebydefault strategic-cyber.co.uk/2024/05/07/sec…

folks please help me get this word out. @Crowdstrike named some ransomware PunkSpider, literally the name of one of the pieces of software I made. Completely unrelated of course, mine is a security tool. This is NOT cool, appreciate RTs to get them to change this.

We continue our #intune deep dive by looking at #asrrules #blueteam #cybersecurity #securebydesign strategic-cyber.co.uk/2024/05/02/mic…

@wdormann not just me then. I thought I was special lol :)

@j_opdenakker I regularly buy from backmarket.co.uk and never had an issue

Buying a refurbished iphone, good idea or not? Someone experience with that?

Continuing the #intune series here we look at how to block and control device enrolment. #blueteam #cybersecurity #securebydefault #endpointmanagement strategic-cyber.co.uk/2024/04/23/mic…

The next in the series of "Cyber security is easy, right?" is available. Grab a coffee, select read aloud and listen to me ramble for 5 minutes (in the AI voice of your choosing) about cyber security :) #blueteam #cybersecurity #securebydefault strategic-cyber.co.uk/2024/04/10/cyb…

@UK_Daniel_Card Dunno, when they migrated accounts, mine was declined and didn't get invited back lol

is anyone else struggling with the new CISP format?

@UK_Daniel_Card I have business premium and can see them, if that helps? I don't recall needing to enable anything. Unless it's the method. I believe there are 2 places where SSPR can be enabled. there is a legacy policy and a newer policy. Perhaps linked to that?

#view/Microsoft_AAD_IAM/PasswordResetMenuBlade/~/Audit/fromNav/" target="_blank" rel="nofollow noopener">entra.microsoft.com/#view/Microsof… now this is empty.... if there is a setting to turn this ON I can't find it...

does anyone know where to find the logs for when a USER changes their own password in Azure AD/Office 365 (ENTRA) I can't find a log anywhere...

@UK_Daniel_Card @merill @NathanMcNulty @reprise_99 For me I can see SSPR in the password reset audit logs via the Azure portal home page. Unless I've misunderstood?

@merill @nathanmcnulty @reprise_99 any idea chaps? not an admin doing it (I can see that in the audit logs) but when a user changes their own password... am I going mad?

The latest newsletter has two weeks of content! As always, it includes the latest updates from the Endpoint Management community and product updates from Microsoft! 🔗 danielengberg.com/newsletter-mar… 🌟 Subscribe: eepurl.com/gxhszf #msintune #intune #entraid #powershell