Steven Lorenz

Steven Lorenz, Information security engineer, hobbyist woodworker, runner. Tweets are my own.

[Steven Lorenz @ps_lorenz]

@techspence As much as I'd like to see them not paywall necessary security features, I'm sure there's some internal sob story about shareholder value and continued investment that makes it unreasonable for them to do so.

Muh packacke up sells though!

[Steven Lorenz @ps_lorenz]

@techspence Had a client one time that was required to move to 90 day password rotations to meet a customer requirement. We did a password audit about a year and a half later and found that nearly 2/3 of the people were using the exact same keyboard walk.

[Steven Lorenz @ps_lorenz]

Still needs some polish, but I uploaded an M365 Business Premium baseline (https://GitHub com/pslorenz/M365-Business-Premium-Baseline) trying to focus on SMBs. I've seen a lot for enterprise, but not much love on the SMB side. Not complete, but a decent start.

[Steven Lorenz @ps_lorenz]

@IAMERICAbooted I appreciate the insights you share and would like to tag along if possible.

[Steven Lorenz @ps_lorenz]

@techspence So much this.

[Steven Lorenz @ps_lorenz]

@vxunderground @nikhil_mitt @struppigel Sunny says CARTP would be great

[Steven Lorenz @ps_lorenz]

@vxunderground @Cyb3rMonk Interested

[HotCakeX ✡︎ סגול @CyberCakeX]

After Months of Development, FINALLY ready to share: Harden System Security🎉

✅ Complete System Hardening
✅ Security Posture Analysis
✅ All-in-One Toolkit
✅ Built-in Intune support for Scalability
✅ Beautiful Modern UI
✅ CLI support
https://t.co/lfd3SaDvvM

#Cyber #Windows

[Steven Lorenz @ps_lorenz]

I went looking for an updated Infosec Black Friday list for 2025 and the usual pages hadn't been updated, so I took a crack at one. Still very much a work in progress.

Feedback or additions welcomed.

https://t.co/TwkMOSklGd

[Steven Lorenz @ps_lorenz]

@techspence A couple of new things to add to the tool kit. Thanks for sharing!

[Steven Lorenz @ps_lorenz]

@PrzemyslawKlys Just do it when the pentester come around and revert after. Joking aside, I've seen protected users group added to a subset of non-admins without tangible real impacts. YMMV of course

[Steven Lorenz @ps_lorenz]

@techspence 4 because ZT isn't just some sku you can buy from your favorite/cheapest vendor. 2 is also a great angle because SMB budgets are super tight right now and they often lack the talent and expertise to come up with a budget conscious solution.

[Steven Lorenz @ps_lorenz]

@techspence Great webinar today. Thanks for sharing so many insights and takeaways

[Steven Lorenz @ps_lorenz]

@WWHackinFest Can't wait to trek back to Deadwood

[Steven Lorenz @ps_lorenz]

@HackingLZ Just send it, what's the worst that could happen.

[Steven Lorenz @ps_lorenz]

@N0BANDW1DTH Made it in my top 5 artists:

[Steven Lorenz @ps_lorenz]

@EricaZelic @PwnedLabs @egre55 I had the opportunity to take this boot camp earlier this year. So much great content.

[Steven Lorenz @ps_lorenz]

@N0BANDW1DTH @WWHackinFest That was an awesome set. 🤘🤘

[Steven Lorenz @ps_lorenz]

@jonathanbourke @azuread @EricaZelic As a heavy user of PingCastle, every domain I audit starts out almost that bad. The hope is that they stay a customer long enough to iterate through all of the bad and make them better off for hiring your MSP on. They will probably never really understand what you did though.

[Steven Lorenz @ps_lorenz]

@blackroomsec Great resource! Thanks for putting this together.