In today’s security landscape, retaining audit and sign-in logs for an extended period is crucial for effective threat detection and incident response. Unfortunately, the default data retention periods for Entra (formerly Azure AD) logs are often too short—particularly for businesses looking to investigate security breaches that might have occurred outside of our default 30-day retention. […]
Some of you out there might be thinking, “not another article on the end of passwords, we’ve been listening to this for years.” And to your credit, you are spot on. People have been telling a tale of the end of passwords for at least 5 years now, largely becoming a more popular tale with […]
If you want to provide secure access to your corporate data on personal smart phones without enrolling that device under full IT management, stay tuned because in this article, I am going to show you the exact policies you need to configure to protect your organization. Access on the Go When we think about users […]
Did you know that users outside your organization can initiate Teams chats with other members of your team by default in Microsoft 365? Attackers are leveraging this to conduct sophisticated phishing attacks in Teams, impersonating a help desk to trick users into compromising their accounts or devices. In today’s article, I am going to show […]
If Microsoft 365 security feels very ad hoc and reactive to you today, stay tuned because in this blog I am going to show you a tool I built that allows you to scale your cybersecurity practice to focus on the preventative while also reducing your assessment time from hours or days to just minutes. […]
When it comes to data protection, we usually throw out all of our security protections when external collaboration and guest users are added to the mix. Guest users can: Download files locally Access sensitive documents on insecure devices Do not even need to prove their identity (by default, setting dependent) In this article, I am going […]
By default in Microsoft 365 Users can register or join any device into your active device inventory in Entra. Additionally, a common method of maintaining persistence for hackers is to join a device to entra after initial user compromise to maintain persistence. In today’s article, I am going to show you my top policies for […]
Allowing users to access resources from any device is the equivalent of an airline company like United saying, “you know what, we are just going to let our pilots fly any plane they want. We don’t know if it is up to code. We don’t really know who is on the plane but they can […]
In today’s remote and hybrid workforce, we’re getting more pushback than ever from customers on preventing access to corporate resources on personal or Byod devices. In this article, I want to provide you with the best path for both securing access on these devices while also ensuring a proper asset management process. Personal Device Access […]
The Nigerian price scam is probably one of the most well known phishing emails out there today but all memes aside, over 90% of all cyberattacks begin with phishing. In this article, I am going to show you how your Microsoft email settings are NOT secure by default and the top 5 recommended settings I […]
In today’s digital age, cyberattacks are constantly evolving, and one of the fastest-growing threats in the Microsoft 365 ecosystem is token theft, also known as token replay attacks. This attack method has surged over 111% year-over-year, and today I’m going to walk you through what token theft is, how it works, why it’s a threat […]
I’ve spoken to countless MSPs looking to elevate their security game and provide a stronger offering for their clients. Yet, many find themselves stuck—unsure where to begin or what roadmap to follow to help them scale and meet compliance standards. If that sounds familiar, you’re in the right place. In this post, I’m excited to […]
