chrisonsecurity

[chrisonsecurity @ChrisOnSecurity]

New blog post: Windows 11 security - a first look

You have heard about the TPM requirement. In this post, I talk about the background and give a high-level overview on hardening capabilities in #Windows11.

#WindowsInsider @windowsinsider
#Microsoft
https://t.co/6dEegALAku

[chrisonsecurity @ChrisOnSecurity]

@AVM_DE @vodafoneservice Die Internetverbindung, WLAN nicht betroffen. Die Logs zeigen keine Unterbrechung an, nach 10 - 30 Sekunden gehts dann immer weiter. Fällt hauptsächlich in Teams Calls auf. Manchmal Unterbrechung alle paar Sekunden, manchmal auch über eine Stunde alles ok.

[Vincent Le Toux (Paris, France) @mysmartlogon]

#PingCastle 3.0 released !!!
https://t.co/wAQMeSPOvz

Active Directory & AzureAD security health check in seconds

>200k AD audited, management readable, no install, no admin, no data sent "to a cloud"

Example of report: https://t.co/jfXlLLS7Ln

github: https://t.co/PEB73KZtoq

[chrisonsecurity @ChrisOnSecurity]

I use(d) Twitter for two things:
1. as some sort of RSS feed for tech news
2. to stay in touch with the infosec community

For the latter I can say that I really love the energy over at Mastodon, so naturally I also joined: https://t.co/wRMm18QjeU

See you there!

[ES @ellishlomo]

https://t.co/ZD27qPUPtI

[Maxime Thiebaut @0xThiebaut]

For any #Microsoft365Security analysts out there, we've published https://t.co/ZiBggdGtTR to password-protect your #Malware downloads through the #LiveResponse sessions 🪲 A standard feature one could have said... #infected #zip

[Chad Tilbury @chadtilbury]

The definitive reference of changes between Win10 and Win11! Huge thanks to @bunsofwrath12 for taking on this documentation effort for the #DFIR community >>
Windows 10 vs. Windows 11, What Has Changed? https://t.co/TRo9j5uOsE + a repo of raw artifacts: https://t.co/VCEK6XEdSd

[Ru Campbell @rucam365]

Aug. 2022 update of ~80 Defender for Endpoint features by OS.

Updates:

• Available in Excel (biggest request)
• New vulnerability management capabilities
• Improvements to macOS, Linux, iOS, and Android features
• Loads more

Feedback welcomed!

https://t.co/SCaOsbJ6Rf

[Nıŋʝąƈąɬ 🐈 @RavivTamir]

I'm excited about this one 🎉 Hunt in Microsoft 365 Defender without KQL! Our new query builder is now in public preview
https://t.co/9kUFUpYmiy thanks @Taliash1

[Olaf Hartong @olafhartong]

Sysmon 14.0 has been just released by @Sysinternals . Sporting a new feature that will now allow it to start having prevention features. The new Event ID is 27 and is called FileBlockExecutable.

I've written a short blog with some more details.

https://t.co/b1CjJVvXm0

#sysmon

[Sami Lamppu @samilamppu]

How to get started with Microsoft Defender Threat Intelligence (MDTI)
👉https://t.co/eRX7f8rGVV

MDT premium license is needed for all features but without a license, you can login to the portal and access for free Defender TI offering

[Andy Robbins @_wald0]

The #BloodHoundEnterprise is proud to announce the release of #BloodHound 4.2: The Azure Refactor!

This is a HUGE release. Get all the details in this blog post: https://t.co/FWJBhWfgur

[Nıŋʝąƈąɬ 🐈 @RavivTamir]

Have you checked out all the new learning resources for the entire Microsoft 365 Defender suite of product in our new learning portal? https://t.co/33EiV2KOV6

[Jordan Gross @JordanMicrosoft]

Hey all #passwordless friends! Excited to share that Multiple Passwordless Phone sign-in accounts on one iOS device is now in public preview! Check out below for more details.

https://t.co/U7TWcKbat0

[chrisonsecurity @ChrisOnSecurity]

@rucam365 We all know what that means for licensing. 😅

[chrisonsecurity @ChrisOnSecurity]

Yes, it makes sense that way. Just shows how you perform an action out of habit and you suddenly have delays in multiple projects.

[chrisonsecurity @ChrisOnSecurity]

Struggled for 2 days until I found out why I was unable to change the user scope of my CA policies: if you just select (1) the policy won't save the change unless you also select (2). That happened automatically previously.

#ConditionalAccess #AzureAD

[chrisonsecurity @ChrisOnSecurity]

„How do I know if I have WIP enabled on my devices?“

I think if you implemented WIP you remember the pain. https://t.co/9xPXO6PEz1

[Thomas Kurth | MVP @ThomasKurth_ch]

#LAPS built-in in to #Windows11 #Insider and support for #AzureAD, #PasswordHistory and much more. #MEM #EndpointManagement

https://t.co/gP0CNRDq43

[Alex Simons @Alex_A_Simons]

I’m over the moon to help launch Microsoft Entra, our new family of Identity and Access solutions that includes Azure AD, Entra Permissions Management (previously CloudKnox), Entra Verified ID and a new simplified admin portal experience https://t.co/Le9XO5HSgE

[Skaylink @we_are_skaylink]

Unser Security Experte @ChrisOnSecurity erklärt, wie anfällig Azure AD für MFA-Spamming ist und wie Unternehmen MFA trotzdem in sichereren Konfigurationen verwenden können. https://t.co/Tbpvp7FVHd

#security #azuread #ActiveDirectory #mfa #ITsecurity #zerotrust