Script: Sentinel Data Lake Table Management
Microsoft Sentinel’s data lake story is quietly powerful: you get fast, 90-day Analytics (Shortterm) for hunting and detections, plus scalable, …
Microsoft Security
How to Block Upload to WeTransfer, DropBox & Google Drive (but Allowing Download) – using Microsoft Purview Data Loss Prevention (DLP)
This blog was created in response to recent policy changes related to the WeTransfer cloud storage service. These changes raised …
Troubleshooting Windows Feature Updates not being deploying using Intune/AutoPatch/WUfB
I have been banging my head why some machines wouldn’t deploy Windows 11 Windows Feature Updates (24H2) as part of …
How to authenticate with Windows Hello for Business or FIDO security key in RDP session ?
This little guide will show how you can authenticate with Windows Hello for Business and FIDO2 security key in a …
Detect Impact MFA Enforcement
You may have noticed that Microsoft will enforce MFA requirement per October 15, 2024 for Azure/Entra/Intune. If this is new …
Entra Private Access/GSA – Automatic Network Detection
This blog covers a custom script solution for Intune, that can be used to automatically detect, if the Entra Private …
MFA issues for Invited guest – Cause: Cross-Tenant Access due to Partner Relationship
This blog is about an issue, I experienced when I was invited as Guest to a tenant, where cross-tenant access …
Re-onboard LogAnalytics to Sentinel, if SecurityInsights solution is deleted by mistake
Critical features will break or stop working, if you delete too much in Legacy solutions like SecurityInsights, SQLAdvancedThreatProtection or SQLVulnerabilityAssessment. …
[issue] Connect-AzAccount : Method not found: System.Threading.Tasks.Task
Error Connect-AzAccount : Method not found: ‘System.Threading.Tasks.Task`1 Azure.Identity.InteractiveBrowserCredential.AuthenticateAsync(Azure.Core.TokenRequestContext, System.Threading.CancellationToken)’.Could not find tenant id for provided tenant domain ‘xxxxxx’. Please ensure …
Collecting DNS events using Azure Monitor Agent
This blog will give you insight on how to setup collection of DNS Events from Windows devices using Azure Monitor …