Another day of Cybersecurity
This blog post focuses on bypassing Microsoft Defender for Cloud Apps (MDA) App Control. This bypassing method is one scenario of four that allows you to bypass session proxy. There are a few ways to restrict and prevent agent impersonation … Read the rest
Are your Intune local users configured as local admin? Do you’ve got additional admin users on Intune devices? In most cases, Intune users could be the Local administrators, and it’s a feature without any disruption, and this is by default.… Read the rest
What’s going on inside the box? Is the Service Principal monitoring is part of your security monitoring? If we rely on many security incidents, the Service Principle must be monitored. The following post will guide how to Monitor Service Principal … Read the rest
Okta breach learned is that any vendor can be breached sooner or later. No one is immune. Okta is one of the stable vendors that we know cuz the Okta history was pretty good. This blog post will take you … Read the rest
This blog-post it’s all about Hunting BitLocker with Microsoft Sentinel. Is the cloud is more secure than the on-prem environment? It depends on many situations. If you don’t know how to manage the security control on the cloud, you will … Read the rest
The following post focuses on Okta brute force detection with Microsoft Sentinel and many tips for the investigation and day-2-day.
A hacker attempts to guess your usernames and passwords during a brute force attack. Hackers use tools to speed up … Read the rest
This post focus on how to Pass the CA. Pass-the-CA is the way to bypass Azure AD Conditional Access policies. Currently, there are four techniques to avoid CA policies, and the following one in this post is the most simple … Read the rest
It looks like it took from a Netflix series, but in my opinion, the film direct isn’t that successful. 😜
If you’ve read the newsletters from The Verge or any other media, you probably think that 2022 is gonna be … Read the rest
