Entra ID
-

Why Multi-Factor Authentication is Non-Negotiable for Azure Security
You will never out-patch, out-educate, or out-monitor credential theft — but you can neutralize it. Multi-Factor Authentication (MFA) is the single most effective control available to stop account compromise, making it a foundational pillar of Zero Trust and modern cloud security. When MFA is enforced consistently, stolen passwords become largely useless, dramatically reducing the risk…
-

Advanced Threat Intelligence & Hunting with Microsoft Defender and Sentinel
Threat intelligence shouldn’t live in spreadsheets. It should live in your detections. Microsoft Sentinel’s integration with Microsoft Defender Threat Intelligence enables security teams to move beyond reactive alerts and into intelligence-led threat hunting. By correlating high-fidelity Microsoft-curated indicators with real telemetry—endpoint, identity, and network data—you can surface adversary activity earlier and with higher confidence. In…
-

Effective Management of Identity and Access with Microsoft Entra ID
In today’s hybrid-first enterprise landscape, identity is the new perimeter—and Microsoft Entra ID sits squarely at the center of that transformation. Whether you’re securing access to cloud apps, managing hybrid identities, or enforcing Zero Trust principles, Entra ID offers a robust toolkit for modern identity and access management (IAM). This article explores practical techniques and…
-

Azure Security Features Explained: Protecting Your Data with Microsoft’s Robust Framework
In today’s digital world, securing sensitive information is a top priority for organizations. Microsoft Azure, one of the leading cloud platforms, offers a comprehensive suite of security features designed to safeguard your data from internal and external threats. This is supported by a solid suite of Security SaaS offerings in the Defender stack, Azure Firewall,…
-

Zero Trust with Microsoft Security Solutions: An Overview
In today’s rapidly evolving threat landscape, the traditional perimeter-based security model is no longer sufficient. As organizations adopt hybrid work environments, expand to the cloud, and connect countless
-

How to Find Users With & With-Out MFA Quickly
Wondering where to get started finding all the users in your Entra ID that do not have MFA enabled? Here’s some quick PowerShell to get you started and easily identify what users may be missed by your conditional access policies.
-

Find Actions Taken by an Administrator in Azure Logs
In this post, join me in exploring how to find meaningful actions taken by an administrator in your environment. We will take a look at how to find what changes were made by an individual account. Join me as we dive into auditing logs in Azure and determine if the administrator account is responsible for…
-

Incident Response Foundations – Identity
In today’s post I talk about responding to a compromised identity in Microsoft Entra ID. There is a lot of advice floating around on what to do and how to respond; I’m bringing experiences and existing guidelines together to provide a solid foundational starting point for identity based incident response in this post.
-

Fortifying Your Cyber Defenses: Preventing Unmanaged Device Compromises
In the evolving landscape of cyber threats, ransomware operators are increasingly targeting unmanaged devices. These devices, including personal devices used for work-related tasks, often lack the robust security measures found in managed systems. Understanding these evolving threats and taking proactive steps to protect your organization is paramount. Today, our article delves into the challenges posed…
-

Strengthening Cyber Defenses Against Modern Threats
In today’s digital age, cyber threats have evolved into sophisticated attacks that exploit vulnerabilities on an unprecedented scale. It’s crucial to understand these threats and take proactive steps to protect your organization. In this article, we explore the evolving landscape of cybercrime and provide actionable measures to safeguard your digital assets. Today, we continue our…