Feedback that makes my day 💙

With the #EntraID #Passkey Preview officially announced I wanted to (re)share my blog post about it.

I also published a PowerShell module to enable the preview in seconds with all existing AAGUIDs still usable.

cloudbrothers.info/en/passkey-pub…

Have you blocked Device Code flow by default yet?

If not, this very slow Graph PowerShell Beta command will tell you who is using them

Get-MgBetaAuditLogSignIn -Filter 'AuthenticationProtocol eq 'deviceCode''

Microsoft calls this a best practice, so go create the CA policy ;)

Big big news today: Entra ID + Microsoft Authenticator + Passkeys = standards based, enterprise grade phishing resistant auth at no additional cost. Learn more here: techcommunity.microsoft.com/t5/microsoft-e…

I'm very looking forward to talk with Gregor Reimling #AzureBonn about #Azure Governance and #EnterpriseScale at #ExpertsLiveNL . In this demo-driven session will also share our experience of new capabilities in CSPM and DevOps security. Save one of the last ticket:
expertslive.nl

💥 You thought we were done with Entra announcements for the week?

🤩Guess again.

While we love all the awesomeness of Entra ID's built-in options like Microsoft Authenticator, customers sometimes need to integrate with other MFA providers.

🛡 New Blog: Investigating Microsoft Graph Activity Logs
In April Microsoft announced GA of the Graph activity logs, this new log source opens opportunities for defenders. The blog explains how the data can be effectively analyzed and enriched with #KQL .
kqlquery.com/posts/graphact…

🌟 How cool is that? Congratulations to our newest MVPs, @UgurKocDE and @AdrianRitter, who have just joined the ranks of our best. In total, eight of our Flight Engineers have now received MVP awards in various key areas!

#MVP #MVP Buzz #BetterTogether

spencer Or even better, use our automated loop :
github.com/LuccaSA/PingCa…
Credits : mpgn

Annoyed by Microsoft's recent Azure portal change that collapses all the menus? Go into the settings menu in the top right, 'appearance' menu and select 'Expanded'.
Life's good again!

Presenting later today at the #ICEIS2024 conference the research paper I co-authored with Roberto Rodriguez 🇵🇪: 'Exploring Applicability of LLM-Powered Autonomous Agents to Solve Real-life Problems: Microsoft Entra ID Administration Agent (MEAN)'

⏰ Last chance alert! ⏰

Only today & tomorrow left to book your ticket at €1499 for the upcoming #PowerShell Conference Europe in Antwerp from June 24th to 27th, 2024. Don't miss out on the early bird rate, as of May 1st, prices go up to €1749! Secure your spot now! #PSConfEU

All the queries from the KQL book that we wrote are now available on the books official repo for you to explore and use. If you buy the book, you will get all the context with them, like why we favour some operators over others, but have a read either way! aka.ms/KQLMSPress/Git…

This official statement in the docs finally solves the #EntraID premium licensing question many big companies have and do far only a tweet from Alex Simons answered. This is a bit of a better reference going into a customer discussion 👍

It's finally official in the docs! 👏 👇

learn.microsoft.com/en-us/entra/id…

Here's the biggest solutions to all my shenanigans:
Require signing - for SMB and LDAP
Don't have unsupported OS's
Run Certipy in your environment and consult the SpecterOps ADCS whitepaper for solutions
Disable the NAA accounts and use Enhanced HTTPS
Go through all the…

The new Microsoft Defender for Identity capabilities directly built into MDE on your domain controller will be a great capability. Currently only use it if explicitly advised to do so.

#MDI

learn.microsoft.com/en-us/defender…

💻 Intune Offboarding v2 is now Live

I have also created a short video to introduce you to Intune Offboarding (and help Jeff 😂).

Visit the website: intuneoffboarding.com

#MSIntune #EntraID #Autopilot #GraphAPI

Goodbye Apple Keychain, hello Secure Enclave

#EntraID

learn.microsoft.com/en-us/entra/id…

iOS Shortcut to directly open the password options page to enable Authenticator ass passkey provider in case you use a dedicated password manager. Apple pls fix.

icloud.com/shortcuts/ed7f…