Today i am going to be recapping the M365 highlights from Microsoft Ignite, a conference you can spend 5 thousand dollars to attend to listen to Microsoft aggressively shove Copilot down your throat for 3 days in a row. With that being said, still some pretty cool announcements so lets dive in. These announcements are […]
When it comes to data protection, we usually throw out all of our security protections when external collaboration and guest users are added to the mix. Guest users can: Download files locally Access sensitive documents on insecure devices Do not even need to prove their identity (by default, setting dependent) In this article, I am going […]
By default in Microsoft 365 Users can register or join any device into your active device inventory in Entra. Additionally, a common method of maintaining persistence for hackers is to join a device to entra after initial user compromise to maintain persistence. In today’s article, I am going to show you my top policies for […]
Allowing users to access resources from any device is the equivalent of an airline company like United saying, “you know what, we are just going to let our pilots fly any plane they want. We don’t know if it is up to code. We don’t really know who is on the plane but they can […]
In today’s remote and hybrid workforce, we’re getting more pushback than ever from customers on preventing access to corporate resources on personal or Byod devices. In this article, I want to provide you with the best path for both securing access on these devices while also ensuring a proper asset management process. Personal Device Access […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls I am excited to announce the soft-launch of an automated tool, CloudCapsule, I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw […]
The Nigerian price scam is probably one of the most well known phishing emails out there today but all memes aside, over 90% of all cyberattacks begin with phishing. In this article, I am going to show you how your Microsoft email settings are NOT secure by default and the top 5 recommended settings I […]
In today’s digital age, cyberattacks are constantly evolving, and one of the fastest-growing threats in the Microsoft 365 ecosystem is token theft, also known as token replay attacks. This attack method has surged over 111% year-over-year, and today I’m going to walk you through what token theft is, how it works, why it’s a threat […]
In a previous post, I showed you how to automate user onboarding via a Microsoft Form and Power Automate flow. Today we are shifting the focus to user offboarding. When managing employee offboarding, it’s crucial to ensure the process is both efficient and secure. The manual tasks, from revoking user access to transferring email permissions, […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls I am excited to announce the soft-launch of an automated tool, CloudCapsule, I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw […]
In last weeks post, I showed you how to use Microsoft Forms and Power Automate to automate employee onboardings across customers. This week, I am going to show you how to do this in HaloPSA leveraging the self-service portal customers can use as a front end. We will be using a webhook in Halo to […]
Employee onboarding can be both time consuming and prone for human error across our technicians. In this article, I am going to show you how to create a tailored onboarding form for a customer that can perform the following automations: Creating the user in Microsoft Assigning a License to the User Assigning a Manager Adding […]
