Joël Hasler

[DirectoryRanger @DirectoryRanger]

Series on Kerberos Security
Overview: https://t.co/Df1LwWRlb1
Credential Access: https://t.co/tCjLVILVpx
User Impersonation: https://t.co/6LGkaSmsRv
Delegations: https://t.co/0cGtt6aGGm

[Michael Niehaus @mniehaus]

Time to move to Entra Cloud Sync https://t.co/Mw49YaEisR

[Kevin Kaminski @kkaminsk]

Microsoft Entra ID just flipped a switch: passwordless is now the default sign-in experience for millions of users. Here's what changed and why IT leaders need to pay attention. 🧵 #MicrosoftEntra

[Florian Hansemann @CyberWarship]

"AzureADAssessment: Tooling for assessing an Azure AD tenant state and configuration"

#redteam #infosec #pentest
https://t.co/tzQKeT4sPW

[Hasain Alshakarti @Alshakarti]

Recommended reading: DART lessons on securing Active Directory.

Highlighting some of the most common issues seen in Active Directory environments.

Weak passwords, excessive privilege and poor credential hygiene, insecure account configuration...

https://t.co/mMHtB0e122

[Thomas Verwer @thomasverwer]

Must read: still one of my favorite blogs illustrating how to pivot around with the three-headed dog Kerberos and what TTP’s and weaknesses exist..

#ActiveDirectory #AzureAD #Kerberos #identity

https://t.co/skwl5D5tXY

[Joël Hasler @schwede05]

I like to do an RDP connection with my fido2 security key. With PIN and fingerprint it is working perfect but not with the security key! Does someone have an idea? @TruBluDevil and @AlexFilipin
https://t.co/jpbTmM4cLw

[Joël Hasler @schwede05]

happy clappy😉 https://t.co/8uGcrzHhYx

[rootsecdev @rootsecdev]

#Azure meme for the day.

[Joël Hasler @schwede05]

What does "Customize continuous access evaluation
- disable" really mean? I thought it disables CAE, but I was wrong😬We realized when CAE is enabled legacy authentication automatically get blocked. So we just switch the policy Off. Can you explain that? @AlexFilipin

[Sean Metcalf @PyroTek3]

Read this article about ways Azure AD & Azure tenants could be compromised (and continues to be)

[Alex Simons @Alex_A_Simons]

Today's news: A ton of Microsoft Authenticator improvements, including requesting app and location! Read all about it here: https://t.co/00uxLgxFE8

[Joël Hasler @schwede05]

@JefTek @JefTek many thanks for the link, it is quite helpful. What is the difference between KeyCredential and PasswordCredential? From the Azure Apps I only now secret and certificate. Can you help me in this? many thanks

[Joosua Santasalo @SantasaloJoosua]

Fresh out of MSIgnite - @sarahhandler presents new features coming to Azure AD Conditional Access! My favorite will be Conditional Access Policy Conditions for Service Principals (AKA workload identities) https://t.co/0C3FPcZWVn

[mark risher @mrisher]

👏 @CISAJen 👏-- password-only authentication is a relic of the past. ALL administrative access should be protected by multifactor authentication, ideally based on FIDO Security Keys. No matter how small your service is, hackers will exploit and/or use this to move laterally 🔐

[sysengineer @sysengineer2]

#Microsoft365 & #AzureAD plans to let admins choose specific auth methods for different actions. @Alex_A_Simons #tec2021