Another day of Cybersecurity
Are your Intune local users configure as local admin? Do you’ve got additional admin users on Intune devices? In most cases, Intune users could are the Local administrators, and it’s a Feature without any disruption, and this is by default.… Read the rest
The cloud is more secure than the on-premises environment. Still, if you don’t know how to manage the security control on the cloud, you will find yourself with many security issues, misconfiguration, and gaps. This blog-post it’s all about Monitor … Read the rest
It’s known to have a pre-defined perspective when you hear the word “cloud security.” Some people think of apps being configured correctly.
Some people think of infrastructure concepts like networking and VPNs. Others think of identity concepts like password spray … Read the rest
Sentinel. Sentry, a defender always on the guard who aims to protect and withstand threats, anticipate any attack, and assume that it will arrive, and adjust the behavior accordingly. Be present to protect the assets and the area.
This blog … Read the rest
Recently, there have been massive cyberattacks against cloud providers and on-premises environments, the most recent of which is the attack and exploitation of vulnerabilities against Exchange servers – The HAFNIUM. This post focus on Azure Sentinel and Sysmon 4 … Read the rest
Do you know the difference between a successful implementation and a failed implementation in the cloud? Costs! This post focus on Azure Sentinel Cost Optimization with KQL Tips.
Cloud costs are critical, and even they have a specific role nowadays … Read the rest
An attacker is like a lover. He teases until he finds the right moment to act on your network. This behavior is the same for the PowerShell attack.
The following post focuses on PowerShell obfuscation and how to monitor with … Read the rest
Roses Are Red, Violets are Blue, and If you think your RDP is secure, I’ve some ransomware for you.
There’s been a tremendous increase in cybercriminals attempting to perform attacks by exploiting remote login credentials over the last year. Many … Read the rest
