André Mieth 🇩🇪🇨🇿

Cyber Security Architect @glueckkanja_ | Security Copilot | Microsoft Defender

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

🚀 Unified Sensor v3.x for Microsoft Defender for Identity is now Generally Available!

🛡️ Enhanced coverage
⚡ Better performance
⚙️ Simplified deployment

🔗 Learn more: https://t.co/XSrijVaMfp
#CyberSecurity #IdentitySecurity #MicrosoftDefenderForIdentity #MDI

[Fabian Bader @fabian_bader]

My colleague Pascal did an outstanding job dismantling a info stealer that was found in the onboarding phase of a new customer. Read his deep dive to get a better understanding of how this multistage makes worked.

https://t.co/iHaOikyilF

[glueckkanja @glueckkanja_]

‘23, ‘24, ‘25 – The Three-Peat.

glueckkanja is a finalist for the Microsoft Security Excellence Awards 2025 – three years at the top!

Microsoft trusts us. Businesses rely on us. Hackers fear us.

Proud to be among the best. See you at RSA Conference, San Francisco!
https://t.co/QlNarpmieo

[glueckkanja @glueckkanja_]

Yeah, yeah, yeah, Year! We're @Microsoft Partner of the Year 2024 🎉 – and it’s our eighth time! What, why, and how: Find all the details here: 👉 https://t.co/uQ3MeZs28R

#MSPartner #MicrosoftPartnerOfTheYear

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

The journey begins! Looking forward to a great week in Austria with super interesting topics, geeky stuff, and wonderful people!
Bootcamp 2024 #B24

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@magnus133 @getrubix no drawbacks - no wait for initial sync (30min with Entra Connect) needed. Just setup cloud kerberos trust. If the client is not able to use it, a fallback to key trust will happen.

https://t.co/8wMu3nbD3x

[RADIUSaaS @RADIUSaaS]

We are pleased to announce that @RADIUSaaS also supports Microsoft #CloudPKI. Sign up for our preview today: 👉 https://t.co/rogfRN1XvA

[Fabian Bader @fabian_bader]

📢 I'm excited to share that I will be speaking at Experts Live Denmark 2024.

Join me and many other amazing speakers for a day full of knowledge and networking.

🗓️20.03.2024
🏬Microsoft Denmark

https://t.co/CT97L3jyAt

#expertslivedk @ExpertsLiveDK

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

Wenn man nicht merkt, wie schnell die Zeit vergeht - Danke @glueckkanjagab für die letzten 10 Jahre!

Auf die nächsten 10 Jahre! 🥳

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@DrAzureAD "...real Bud"
I have to disagree👇🏻😉

[glueckkanja @glueckkanja_]

#Defender vs. #Sentinel: zwei erstklassige Security Solutions, ein Ziel - nämlich die Sicherheit von Unternehmen. Aber welche sollte man wählen? Lasst euch von @stephanwaelde, @Thomas_Live und @FabianBader die Unterschiede zeigen.

Jetzt anmelden
https://t.co/fHOAlKJRIU

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@fcarolan Workaround: switch ASR rule from Block die Audit/Off

Block Win32 API calls from Office macros (Intune)
92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b (GPO)

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@fcarolan not only blocking.. shortcuts on desktop and taskbar are removed

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@t3l3machus tested it. seems that u have some interesting followers from microsoft ;-) with latest definition updates it isn't working anymore (not all your scenarios tested yet.)

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@JosephRyanRies for about 5 years?

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@fabian_bader

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

@hosebei 0 CVEs 👌🏻

[André Mieth 🇩🇪🇨🇿 @A_Mieth]

🛡️#MDI🛡️
Switch from WinPcap to Npcap (1.0)

- WinPcap is no longer supported
- New Agents: Npcap is shipped & installed with the MDI Agent (since 2.184)
- Existing Agents: Uninstall Sensor & WinPcap and reinstall Sensor (download current package!)

https://t.co/ywZebTmrpV

[Dirk-jan @_dirkjan]

Ready for @chvancooten at Adversary Village #DEFCON30