Or Tsemah

Product manager
Opinion\Tweets are my own

[Or Tsemah @Or_Tsemah]

https://t.co/sWEyPzlVeD

[Or Tsemah @Or_Tsemah]

I've spent most of my career in identity security. With agents, a valid credential can't tell you if anyone meant the action.

At NewCore we're building the agentic identity provider for people and agents, with a person accountable for every action.

Full post below.

[Dr. Eli David @DrEliDavid]

This is the deal

[Joe Stocker @ITguySoCal]

Microsoft Defender XDR (aka Microsoft Defender for Cloud Apps?), User Investigation > "Identity Timeline" is by far the most helpful tool to use in a forensic investigation of a cloud account takeover event outside of PowerShell tools like Hawk.
https://t.co/H9BnSLCTr9

[Chris Rose @ArchRose90]

A satire show in Israel deservedly mocks the BBC again and the disingenuous calls for ceasefire. Wait until the end, it’s worth it. 😂

[Chris Rose @ArchRose90]

Just to highlight how much of a laughing stock the BBC is now, an Israeli satirical programme made fun of them and it’s pretty spot on.

[Microsoft Security @msftsecurity]

For the fifth year in a row, Microsoft Defender 365 achieved industry-leading results in the @MITREengenuity ATT&CK® Evaluations: Enterprise.

See how its XDR capabilities responded to an emulated attack from threat group Turla: https://t.co/XVSGjUg4EH #XDR

[Heike Ritter @HeikeRitter]

💡Now you can download and schedule periodic Defender for Identity reports 📊 from the Microsoft 365 Defender portal, creating parity in report functionality with the classic Defender for Identity portal. Go to Settings > Identities > Report management #CyberSecurity #infosec

[Or Tsemah @Or_Tsemah]

So happy that all our hard work on #ITDR is coming to fruition...

[Microsoft Security @msftsecurity]

With identity-based attacks growing, it's becoming more critical to implement a comprehensive ITDR solution. Here are three areas to consider in your journey: https://t.co/LAOC6XUu8L #IAM #XDR

[Or Tsemah @Or_Tsemah]

@DebugPrivilege @JosephRyanRies BTW, you'll find a nice suprise in the newest sensor version.
https://t.co/UzWlc0C11u

[Or Tsemah @Or_Tsemah]

🥷

[Heike Ritter @HeikeRitter]

Season 3 of the Ninja Show is almost over! 🥲 Join our team on March 30th to learn how to protect your identities with Microsoft Defender’s Identity Threat Detection & Response! Add it here > https://t.co/6aFWVDcx6S #ninjashow #cybersecurity #infosec #itdr

[Or Tsemah @Or_Tsemah]

@DebugPrivilege @JosephRyanRies We are currently exploring alternatives for the 1644 event auditing requirement. You can follow the product's "What's new" section at https://t.co/Va2MmtGYdx to stay up-to-date on when it becomes available.

[Fabian Bader @fabian_bader]

The new #MDI alert type "Suspicious certificate usage over #Kerberos protocol (#PKINIT)" detects misuse of certificates in your #AD environment.

For additional information check out the release blog

#ADCS #Security

https://t.co/D465jeKEkX

[Nıŋʝąƈąɬ 🐈 @RavivTamir]

Microsoft’s security arm is now a $20-billion-per-year business- that’s double the $10 billion per year seen in 2021, and up from the $15 billion it brought in in 2022 https://t.co/f9CECVd7F0

[Or Tsemah @Or_Tsemah]

Unified RBAC support for Defender for Identity
https://t.co/zol7zl6DzN

#DefenderForIdentity

[Jeffrey Appel | Microsoft MVP @JeffreyAppel7]

Using Defender for Identity #MDI and getting sensor issues after the November patch install?

Make sure the newly released patches are installed. The previous November 8, 2022 update gives issues with Kerberos authentication.

2022: KB5021656
2019: KB5021655
2016: KB5021654

[Nıŋʝąƈąɬ 🐈 @RavivTamir]

Defender for Identity (MDI) Active Directory Federation Services sensor, protects the AD FS infrastructure and alert security teams to AD FS-based threats to defend hybrid identity configurations. Blog 👇🏻 https://t.co/gyTzfD1Mki

[Or Tsemah @Or_Tsemah]

@DebugPrivilege

[Martin Schvartzman @martin77s]

Test your environment for the different configurations needed for Microsoft Defender for Identity using the Test-MdiReadiness.ps1 script
https://t.co/sGHnUW6kNU

#mdi #defenderforidentity #m365d

[Or Tsemah @Or_Tsemah]

@el_jasoon As this experience is currently sourced from the MDA portal convergence, make sure you are using an account that has sufficient MDA privileges or equivalent Azure AD role to access the portal.