Sabitlenmiş Tweet
I'm shaving my head again this year. Please consider donating to this great cause. Help me raise money for #childhoodcancer research with @StBaldricks. stbaldricks.org/participants/b…
English
Tech Brandon
2.9K posts
Tech Brandon
@TechBrandon
Father Engineer Learner Lurker | Microsoft MVP | AD, Entra & enterprise security specialist. Senior Security Consultant @trustedsec. Fellow Human Being.
Katılım Ağustos 2011
419 Takip Edilen1.2K Takipçiler
Tech Brandon retweetledi
Issue #160 of Entra.News is out
Featuring @andresbohren, @cbrhh, @DanielatOCN, @darrenjrobinson, @_dirkjan, @gullett_d, @jvldn1, @martin_rublik, @rucam365, @Mister_MDM, @MarcussenThomas, @12Knocksinna, @TechBrandon and more!
English
@HackingLZ @merill I agree with both points here. Seen both stories consistently.
English
@merill It’s weird because clients I talk with complain about it constantly also it being the primary thing they want.
English
This is the conventional wisdom: Microsoft should make security features free or include them in lower-tier plans.
Unfortunately, in this specific example from @HackingLZ, moving risk-based Conditional Access to P1 is unlikely to make a significant dent in global security risk.
Why? I spent the better part of three years trying to persuade organizations that already had E5 licenses to enable P2 features. Sadly, very few did. Even though they were already paying for them. Deployment simply required too much work and change management on their end.
My entire team at Microsoft worked with E5 customers, and one of the things we actively tracked and followed up on was the deployment of risk-based Conditional Access policies.
Microsoft even offered incentives to account teams worldwide when the customers they managed enabled risk-based Conditional Access. Yet there were still very few takers.
So, taking a step back: what can Microsoft do to have the greatest impact on the security of all its customers?
My observation was that the biggest improvements came from security features that required customers to do nothing.
The “Microsoft-managed” class of features is what actually moves the needle on security.
Some key initiatives included:
→ Blocking legacy authentication protocols for Exchange Online
→ Enforcing MFA for Azure (you wouldn’t believe how many enterprises. Even regulated ones, threw the book at us over this)
→ Introducing Microsoft-managed Conditional Access policies
→ Blocking device code flow by default
The next major effort is disabling SMS and voice-based MFA while rolling out passkeys.
That change alone will improve security for an enormous number of organizations.
These initiatives require a huge amount of time, effort, and follow-up to help customers manage the impact.
Many of the ones listed above were multi-year projects, with some taking three+ years to move the final group of customers across.
In my opinion, it can sometimes be better for more advanced features to remain paid.
Customers recognize them as premium capabilities, pay for them, and 'ideally' commit the resources needed to deploy them properly.
Justin Elze@HackingLZ
Microsoft could instantly make the world safer by moving risk based access policies from Entra P2 to P1.
English
@merill I'm also impacted by Parkinson's in my family. Is there a specific link to donate on behalf of the @wpninjasus event?
English
My mother was diagnosed with Parkinson’s disease when I was a teenager.
I remember that being the first time I truly understood what it meant to die. That death was permanent, and that one day the people we love would no longer be here.
At that age, my mother was my whole world. I’ve always been a mum’s boy, and I couldn’t imagine living in a world without her.
She is still alive today, and I’m grateful that she is. But Parkinson’s has slowly taken so much of her away. She no longer recognises me or knows who I am. I can sit beside her, hold her hand and talk to her, but I can no longer have a conversation with the mother I knew.
That’s the hardest part to put into words. She is still here, but in many ways, I have already lost her. The conversations, her personality, her memories, and the relationship we once shared.
That’s why the charity run at @wpninjasus means so much to me. All donations will go to the Parkinson’s research fund, supporting a cause that is incredibly close to my heart.
I hope the funds we raise can help people living with Parkinson’s, support the families caring for them, and contribute to a future where fewer people have to experience this kind of loss.
I’ll be running for my mum and for every family slowly losing someone they love while they are still here.
Workplace Ninjas US@wpninjasus
Today, we're going to talk about the activities that we have planned for you at @wpninjasus . Our activities this year are what make this event so special. Sure, anyone can throw together a bunch of sessions. Don't get me wrong, we have 60+ sessions from one of the finest sets of speakers that have ever been assembled, but we can do better. January 11th, 2027 will be our pre-day where we do some amazingly fun things throughout the entire day. 🏃 Our #WPNinjasUS Fun Run 5K will kick off at 7 AM at the Canal just a block away. It's sponsored by our friends at @WeAreOmnissa where we will run a few laps for the The @MichaelJFoxOrg ⛳ We will be doing an amazing Golf Tournament sponsored by @FerroqueSystems. at 9 AM, at the incredible The Phoenician Resort where the #PhoenixOpen is played. This event will have a capacity of 40 people, featuring a number of #MVPs and experts in a small and fun setting. 🤓 Our #LegoMasters tournament for those non-golfers will be running 10 AM-2 PM where we will be building the #USSEnterprise in this #StarTrek event. This team format will be a ton of fun, and we certainly encourage you to dress-up in your best #Trekkie outfit for a chance at additional prizes/swag all sponsored by @ControlUp 🤖 The #Hackathon in its second year sponsored by @WorkspaceDNA (the artists f.k.a. #Rimo3), will move to this #RoundRobin format where we will have 5 captains, and they will build their teams live and create an amazing product live with a #Clippy Trophy on the line and other prizes. We will even have our #Scholars involved, as we recently secured funding to sponsor 5-6 people with 3 years or less in tech, once again thanks to our friends at @devicie 🥳 The final event of the night will be the Opening Night Pool Party sponsored by @PatchMyPC , which will have an open bar, incredible buffet, and tons of fun (and likely ducks). This will be a can't miss opportunity to hang out with the attendees and have a blast. It's not just the preday that has fun activities!! 🐶 Day 1, will feature a Puppy Play Area, where you can play with a bunch of adorable puppies when you've had too much #AI or too much #Microsoft and just need a break from all that tech stuff. This is a special opportunity to de-stress and de-compress with your friends. 🧘 Day 2, will have our Puppies & Yoga event at 7 AM, where you get 45 minutes of yoga, and another 30 minutes of puppy playtime. We love dogs, so what can we really say there? We're going to have a ton of fun in Scottsdale January 11-13, 2027, and these are just the initial things we have planned. We will continue to add other opportunities for people to have a special time in that amazing 70-degree weather. #WPNinjaS #MDX #MSIntune #MSEntra #ConfigMGR #ITPros #Sysadmin #MSSecurity #Community #Collaboration Make sure you register now friends!! workplaceninjas.us
English
@DebugPrivilege I don't envy you. Hope you nap a fantastic one.
English
After 24 hours there are already 250+ applicants 😅
DebugPrivilege@DebugPrivilege
I’m looking for a Security Researcher based in the US with hands-on experience in AD, Entra ID, and the ability to vibe code their way through solving problems. Strong communication skills and the willingness to take initiative is required for this role. ats.rippling.com/netwrix-corpor…
English
For the love of God make this default behavior... Did AD teach us nothing?!?!
Daniel Bradley@DanielatOCN
Microsoft just added the ability to 𝐝𝐢𝐬𝐚𝐛𝐥𝐞 𝐠𝐫𝐨𝐮𝐩 𝐧𝐞𝐬𝐭𝐢𝐧𝐠 for groups in Microsoft Entra > ourcloudnetwork.com/how-to-disable… It's very new, can only be set during group creation and I cannot see any documentation on Microsoft Learn about this yet outside of the Graph API permission reference, but it was caught by my MsDocsTracker! Very useful for groups that protect sensitive applications or resources where you want every member to be added directly. Check out my article linked above to enable the disableNesting property for groups! #Entra #News #Microsoft
English
Tech Brandon retweetledi
I’m looking for a Security Researcher based in the US with hands-on experience in AD, Entra ID, and the ability to vibe code their way through solving problems. Strong communication skills and the willingness to take initiative is required for this role. ats.rippling.com/netwrix-corpor…
English
@merill I've got a few updates I'd love to add. Just need to dedicate the time to get them right. Looking forward to being an official contributor instead of a cheerleader.
English
Putting the final touches on the upcoming 🔥 Maester 2.2 release and look at this!
A new Contributors page dedicated to the awesome community of folks that make Maester what it is today.
Check it out and click through to the detail page of each author.
maester.dev/contributors
BTW @fabian_bader had a neat idea. Soon we'll be handing out exclusive badges/credentials to folks who contribute Maester tests.
English
This "long press" thing has got to be a trick to get more engagement. Nonetheless, long press this image toearn the ways of dark helmet.
English
@JackRhysider Maybe I'll build a privacy tool BECAUSE we're friends. ❤️
English
If you're building a privacy tool, I wanna be your friend.
English
@merill @techspence Worth a look for sure. I'm just happy to see Microsoft still putting out documentation using the Tier 0 model. I've never gotten away from explaining things that way.
English
I don't usually post about Active Directory but I'm doing this for @techspence 😂
This is officially from Microsoft.
Link below 👇
English
Reliability is only 1 reason. I'm seeing lots of orgs using Entra with Okta, Ping, Duo, etc. These are mostly redundant services that increase complexity and attack surface. I almost always recommend using Entra native controls when looking at it from a security perspective.
Merill Fernando@merill
When I used to work at Microsoft, Entra ID's reliability was something that would come up quite often when orgs were looking to move to Entra ID as their strategic identity provider. This was an easy one to answer. All I had to do was pull up the Entra ID SLA page and ask them for their uptime over the last 5 five years.
English
Tech Brandon retweetledi
Who’s looking for a job and has knowledge in AD, Entra Id, and AI?
English
@techspence I don't know... A repo by a guy without a Twitter account... 😂 JK this is the best out there for AD CS right now
English
IT admins and internal security teams should be doing a lot of things. You've got a lot of responsibilities, no doubt. But absolutely one of those things should be running Locksmith on a regular basis.
Created by the awesome human, Jake Hildreth.
This IS THE BEST ADCS auditing tool there is. Hands down. yes I am biased :-P
github.com/jakehildreth/l…
English
Been getting messages all day from the MVP renewals. Congratulations to all you amazing contributors. I'm looking forward to being anxious with you next year. #MVPBuzz
English
Still deep in identity. Still breaking enterprise security. Still chasing weird Active Directory internals. Still publishing research. Still releasing tools. Still speaking at conferences. Still learning. Still giving back to the community.
Still Microsoft MVP. 🔐🏆 #MVPBuzz
English
@sapirxfed @BlackHatEvents Similar to you. My dream came true a few years ago when I was accepted to speak at defcon during my birthday week. My research is nowhere near your caliber. I look forward to hearing your success story.
English
Every year,@BlackHatEvents falls on my birthday.
I have a dream to go there and present on my birthday. it would be the best gift. I hope that by next year I'll do such good research that I'll feel confident to submit it to the conference, and get accepted!
The annual FOMO begins🤭
English
Wondering where AI is lurking in your Entra tenant? I wrote about a few methods that are likely going undetected and they might surprise you.
Tech Brandon@TechBrandon
Here's my newest blog article. Did some light research on AI Agents in Entra. A little basic hygiene goes a long way. petri.com/the-agents-ent…
English
I could not be more upset right now... I checked all of my spare cable boxes and don't have an extra Ethernet cable. I feel so ashamed. 😢
English