Recently, I sat down with Joe Markert, CEO of Transformative, and Robby Prochnow, their Chief Revenue Officer, to explore how their MSP has evolved from traditional IT support to becoming a strategic business transformation partner for clients across industries. From Tools to Transformation Transformative’s journey began as many MSPs did—offering general IT support. But in […]
Earlier this year, Microsoft made the E5-Security add-on available for Business Premium subscribers. It’s packed with a ton of amazing security features. Additionally, it is a significantly reduced price than if you were to upgrade to E5 altogether. In this article, I will share the highlights of what is included with the add-on. What’s Included […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants […]
Risky user detections are one of the leading indicators of account compromise in Microsoft 365. By default, you will not get alerted as an MSP for a new risky user. I just talked to an MSP last week who had a client that wired 500k to a fraudulent bank account after the user account was […]
I recently did a webinar on Token theft where I broke down one of the fastest growing attacks: Token theft via AiTM phishing. In this article, I will summarize that webinar and provide my top protections to both prevent and mitigate this type of attack. Understanding the Kill Chain Token theft via AiTM is performed […]
In this weeks article of T-Minus365, I sat down with Allan and Brian from Agilitec IT, a forward-thinking MSP based in Las Vegas (and recent winners of the Pax8 Partner Hall of Fame Award at Beyond) that’s rewriting the rules for how service providers engage, operate, and deliver value. What started as a traditional managed service […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants […]
In this post, we’ll explore how the Australian Cyber Security Centre’s Essential Eight framework maps directly to Microsoft 365 security controls—and how you can automate evidence collection and policy checks across your tenant. Today, we’ll: Walk through each of the eight mitigation strategies Show the Microsoft 365 tools and licensing needed to implement them Highlight […]
In a previous post, I walked you through an incident response playbook for Token Theft via AiTM. This playbook can be leveraged for BEC incidents as well. Today’s deep dive is going to look at proactive protections you can put into place to PREVENT these attacks altogether. We will be focusing on Conditional Access Policies […]
Below are all of the latest feature updates coming to Microsoft 365 Automate your Microsoft Security Assessments CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants to a […]
Microsoft is currently in preview with a new session attribute in Conditional Access policies that Requires token protection for sign-ins. Full Details: Microsoft Entra Conditional Access token protection explained – Microsoft Entra ID | Microsoft Learn Microsoft recently changed the licensing requirement to make this available in Entra ID P1 licensing. With that said, there are […]
Today’s article is going to be a little different than usual. While I’ve worked for a few MSPs and actively consult on a weekly basis, I think its important to hear strategies and struggles from MSPs who are in the weeds looking to develop a better security practice that involves Microsoft 365 tools. So for […]
