Tech Brandon

Father. Engineer. Learner. Lurker. AD, Entra/Azure & enterprise security specialist. Senior Security Consultant @trustedsec. Fellow Human Being.

[Tech Brandon @TechBrandon]

I'm shaving my head again this year. Please consider donating to this great cause. Help me raise money for #childhoodcancer research with @StBaldricks. https://t.co/ylcRZzIU8s

[Tech Brandon @TechBrandon]

@sapirxfed I promise we used to be cooler than this...

[TrustedSec @TrustedSec]

Headed to @hthackers next week? Don't miss Senior Security Consultant @techBrandon presenting, "Abusing Holes in Conditional Access: Modern Attack Paths and How to Close Them" at 11:00 AM on Friday. Add it to your schedule! https://t.co/C7KOvKuxxA

[Tech Brandon @TechBrandon]

@techspence We're cut from the same cloth. So glad we're connected and I'm looking forward to meeting you IRL.

[Tech Brandon @TechBrandon]

@techspence Basically the same idea as exploiting logon scripts. I still find those on admin accounts and scheduled tasks running PowerShell on DCs.

[Tech Brandon @TechBrandon]

@rucam365 @RidgelineCyber I'm so confused. And if I'm confused, so are the majority of administrators.

[Tech Brandon @TechBrandon]

I can't believe we have to keep saying this. Device Code abuse has been happening for over 5 years now and I rarely see policies properly configured.

[ᴍɪᴄʜᴀʟɪs ᴍɪᴄʜᴀʟᴏs @Cyb3rMik3]

If you haven't already, please make sure you build a Conditional Access policy to block device code flow.

Here's how ⤵️ https://t.co/PFZQWju3fv

[Tech Brandon @TechBrandon]

@HackingDave That added reader context has gotta be AI saying..... Ya, we don't care.

[Tech Brandon @TechBrandon]

@JackRhysider I love your dad. That episode you had him on had me rolling 🤣

[Tech Brandon @TechBrandon]

Excited to take the stage again at HTH. What a cool conference.

[Hackers Teaching Hackers @hthackers]

🔐 MFA isn’t magic.

“Abusing Conditional Access” shows how attackers route around Entra Conditional Access and exploit weak spots in MFA enforcement.

HTH Con 2026 | June 3–5 | Columbus, OH https://t.co/9USpLfPvN7

#HTH2026

[Tech Brandon @TechBrandon]

@Bandrel @Cthulhu_Answers

[Tech Brandon @TechBrandon]

@Bandrel I love the traditional pin-up feel blended with.... Whatever you call your tentacle fascination.

[Tech Brandon @TechBrandon]

@m0bilej0n Is the CFP already closed or hasn't opened yet?

[Tech Brandon @TechBrandon]

If you haven't already checked it out, make sure to read my latest @TrustedSec blog introducing Passkey Path. A new interactive blogging approach I'm trying out. It's built like a choose-your-own-adventure guide. https://t.co/pgzPkzawqX

[Tech Brandon @TechBrandon]

@NathanMcNulty @UK_Daniel_Card I'm not in love with the wording but I think what I'm most concerned with is the fact that MFA is only required "when necessary". What does that even mean?

[Tech Brandon @TechBrandon]

@NathanMcNulty @ericonidentity @wpninjasus Oh man, wish I could vote for multiple. 😂

[Tech Brandon @TechBrandon]

@merill is one of the best things to happen to identity security. I'm really looking forward to his next chapter. Unfiltered Merill is going to be absolutely savage.

[Merill Fernando @merill]

Hey folks, some personal news.

I’m leaving Microsoft.

It’s been a privilege to work here, and I’m incredibly grateful for the people I’ve worked with, the customers I’ve learned from, and the support so many of you have shown me along the way.

I’m now starting out on my own and chasing a dream I’ve had for a long time: building software that makes security more practical, accessible, and useful for the people doing the work every day.

Why now?
With all the change happening around us, I feel like new possibilities are opening up. I want to spend this next chapter building things I care deeply about, solving problems that matter, and doing work that brings me joy.

I’m excited. Nervous. Grateful.

My newsletters, podcast, Maester and other tools will all be part of this next chapter, and I’ll share more in the coming weeks.

Thank you for being part of the journey so far. I’m looking forward to building this next chapter with your support.

[Tech Brandon @TechBrandon]

@rootsecdev @Spoonman1091 @cantcomputer 👀

[rootsecdev @rootsecdev]

If you are using security defaults in your Entra ID environment.. Get off of it.

You should have "zero trust" in security defaults with statements like these.

https://t.co/EI025t6rYR