Ricky Flowers

[Microsoft Security @msftsecurity]

XDR and SIEM now in one platform. Meet the new ISOC in Microsoft Defender—a SOC built for agentic security. Here to help you investigate and respond more efficiently. https://t.co/lVwzuITH5H

[Mark Simos @MarkSimos]

I am going to be talking on just about every aspect of security in person over 2 days at the free security forum event from The Open Group

You can register for FREE for this Washington DC event here: https://t.co/aVNKT2fPpF

Would love to see you there!

[Steven Lim @0x534c]

🚨 M365 Connector for Claude: Who’s Accessing Your Workloads?

Using the Defender XDR GraphAPIAuditEvents schema, I built a KQL query to list Entra users accessing Microsoft 365 workloads via the Claude connector and the specific workloads they touch. Once enabled, this connector allows Claude to directly access SharePoint, OneDrive, Outlook, and Teams — a powerful capability that demands governance oversight.

For defenders, this query provides actionable visibility into who is using the connector and what information they are accessing, helping SecOps teams monitor adoption pressure, enforce governance policies, and ensure connector risks are managed before they escalate.

KQL Code:
https://t.co/dasERAFZdd

#Cybersecurity #M365ConnectorClaude #Entra #Governance

[ALI TAJRAN @alitajran]

Microsoft rolls out Password Protection in Microsoft Defender!

The Password protection page in Microsoft Defender shows password-related risks across your identity sources in one place.

Use it to find leaked credentials, exposed passwords, weak password policies, and configuration issues, and then take action directly from the page.

It supports on-premises Active Directory, cloud identity providers like Microsoft Entra ID, and non-Microsoft providers like Okta.

The Password Protection page shows four tabs:

- Password Hygiene
- Password Policies
- Leaked Credentials
- Exposed Passwords

You need a Microsoft Defender for Identity license, or another license that includes Defender for Identity (such as E5), and a Microsoft Entra ID Protection license.

Learn more:
https://t.co/BY6rUevpCv

#Microsoft365 #Defender #Cybersecurity

[Microsoft Security @msftsecurity]

MYTH: Cyberattacks are complex and difficult to stop. TRUTH: Most cyberattacks stem from a failure of basic security hygiene. Read this e-book and discover how Windows 11 can help:

[Ricky Flowers @rickyflowers007]

@fouldsy Sad to hear your leaving. You will be missed. Good luck with whatever comes next.

[Houston Astros @astros]

Brand. New. Ballgame.

#TakeItBack

[Alex Simons @Alex_A_Simons]

Now I can die happy!