Patching can be a struggle for a lot of organizations. However, it is one of the most basic security tasks that security defenders must ensure happens regularly. If you’re still manually patching your servers, you need to look into Azure Arc and Azure Automation to automate this. Azure Arc extends…

A common request from information security teams is the ability to block mass storage devices. As every security defender knows, you cannot draw a hard line and block EVERY USB mass storage device. Exceptions will always come up. …

I’ve been using a NAS (network attached storage) for years to back up data and run a Plex server. I started with a simple two disk, RAID 1 Synology NAS years ago and currently I have a Synology DS916+ with a DX517 expansion attached. It’s a little bit older by…

Whether you’re looking at Intune as a replacement solution or as a green field deployment to manage your iOS, Android, Windows, and Mac devices, scoping and deploying a proof of concept (POC) is typically the first step. I would consider a POC to be user-driven only meaning Autopilot, DEP, etc……

Everyone hates passwords. They are (unfortunately) a necessary evil in the world of information security. I’m here to tell you that passwordless is no longer a thing of the future (like flying cars). You can use passwordless authentication in Azure AD as your default sign-in. …

I’ve been mentoring some folks new to cybersecurity for about a year now. I also stay pretty active on infosec Twitter and Linkedin. I see a lot of people who are interested in infosec focus on offensive skills and certifications required for pentesting and “hacking.” I think about this often…

So there are a few people who have documented this process but I had to take from multiple articles and bits and pieces from each one to get it done. …

Azure Sentinel is Microsoft’s new cloud-native Security Incident and Event Management (SEIM) tool. If you use Azure AD (AAD) for your single-sign on (SSO) identity provider (IDP) for your SaaS apps, those AAD logs will seamlessly integrate with Azure Sentinel with the check of a box. However, if you’re using…

In the modern device management and information security, it’s important to ensure users have compliant devices prior to accessing company data. This is becoming more and more common as more companies use SaaS apps protected by Single-Sign On (SSO) or SAML integration with Identity Providers (IDP). Many organizations use Okta…