Over the weekend I finished a really fun project I had in mind for a couple of weeks.
My newest website: AnalyticsRules.Exchange
In this post I will explain the reason why I created this new website, as well on how I did it. At the moment I will not publish the code, not because I don’t want to share it, but because it’s super ugly and not something I want to be a source for other people to start with. Okay I want to hide it.
On Wednesday, October 26, I will be speaking at the Microsoft 365 Security & Compliance User Group. The topic of my talk is “Why using a FIDO2 security key is important”.
| Time (BST) | |
|---|---|
| 18:15-19:00 | Terry Hugill - Installing, Configuring, and Using AIP Scanner |
| 19:15-20:00 | Fabian Bader MVP - Why using a FIDO2 security key is important |
More information about the “Microsoft 365 Security & Compliance User Group” can be found here.
When using Microsoft Entra Entra ID (Azure AD), you can choose between a wide range of MFA options as an admin and user. Depending on the method you choose this can be a very strong second factor (e.g., FIDO2), or it could be a weaker second factor like text messages. Up until now there was no way to distinguish between the different methods.
But with the recent announcement about authentication strength this changes.
On Thursday, September 22nd , I will be speaking at the Cloud Identity Summit 2022.
The Cloud Identity Summit focuses on Cloud Identity Management, various aspects such as identity protection, managing external accounts, passwordless and much more. The Cloud Identity Summit is a free event that focuses on the exchange between the participants. The group of participants is international and comes from different areas and industries.
In my talk titled “Azure Attack Paths”, I will describe various attack vectors and techniques for the Azure Cloud.
When using Microsoft Sentinel you can connect multiple sources as data connectors. By default all connected sources will ingest their information to predefined tables in the Log Analytics workspace, backing the Microsoft Sentinel instance. You then can query this data using analytic rules or hunting queries to identify abnormal behavior.
But for a few of those data connectors Microsoft is offering an additional feature called “User and Entity Behavior Analytics” or UEBA for short.
At my companies bootcamp, a few colleagues and I did research on the different Azure Active Directory tokens and authentication flows. At the end of the week one question remained unanswered
So, after I returned home, I started digging into this topic to answer the question.
