@SamErde

PowerShell & Security MVP who is passionate about helping others succeed w/ Active Directory, Entra, Defender, & Microsoft 365. Always learning! ✝️👨‍👩‍👧‍👦☕

 Charlotte 👨‍💻 GitHub and ➡️
day3bits.com/
Joined April 2009
  • Tweets17.5K
  • Following1.6K
  • Followers3.4K
1.3KMedia
It's time to drop support for Windows PowerShell, and move to PowerShell 7. Yes, even if it doesn't yet ship in-box with Windows Server. Just install it by default - you can still use WinRM, no need to switch to SSH. .NET Framework is *ancient* and lacks a decade of improvements
16
6
111
9,536
This month's Patch Tuesday release addresses a critical #security vulnerability in the #Microsoft Network Device Enrollment Service (NDES). This is a Remote Code Execution (RCE) vulnerability rated critical with a CVSS score of 8.1. If you use NDES with the #msintune certificate connector, update soon. msrc.microsoft.com/update-gu…
3
9
683
Sam Erde retweeted
Matt Zorich
@reprise_99Oct 12
29
106
13
1,579
68,013
It's been a long time coming but PSWSMan v3 for #PowerShell has been released powershellgallery.com/packag…. This is a major upgrade that moves away from the C omi library to a C# WSMan stack. No more root required, better Enter-PSSession experience, and lots more features enabled.

PSWSMan 3.0.0

Cross platform module that implements the WSMan connection plugin for remoting.`nSee https://github.com/jborean93/PSWSMan for more info

powershellgallery.com
2
2
1
19
1,387
I’ve never tripped on LSD, but I have watched Björk’s live performance of “Cornucopia” on a red-eye flight from Maui to Charlotte after taking Sudafed. ✈️ My goodness, she is intensely and uniquely creative! 🤯
2
334
🤔 Why should the AI Administrator role in #MicrosoftEntra be considered Control Plane (Tier 0)? At first glance, it might seem particularly privileged just to manage #AgentIdentities. But there's an aspect that often gets overlooked. (1/7) 👇
2
12
48
4,309
Cybersecurity has "assume breach" as a key concept. AI safety/security probably needs a coherent "assume misalignment" concept.
14
35
5
178
9,795
#MDDR 2026 is out – a must-read for everyone in #MicrosoftSecurity. Password spray still leads by volume, but post-authentication attacks keep gaining ground: token theft shows up as a distinct post-compromise tactic. Check out the full report: aka.ms/MDDR2026
3
26
99
6,511
It felt like we would never see a day when the Microsoft Graph PowerShell module would implement ALC and help solve dependency conflict issues.😩That day is finally here, thanks to @svrooij! 🎉👏 Release 2.41.0 is hot off the press with his excellent #mvpbuzz-worthy work!🙏💛
1
8
30
1,986
Microsoft will make most Microsoft Learn GitHub repo's private by the end of the year. It's a wider problem, which I don't think has been thought through, so here are mine > ourcloudnetwork.com/microsof… As someone who has personally spent many hours of their time, both creating completely new official Learn articles and creating pull requests to fix mistakes in existing articles, it's a shame to see that recognition disappear. #Entra #Learn #Microsoft

Microsoft makes repo's for Learn documentation private, now what?

Microsoft have just made underlying GitHub repo's for their Microsoft Learn documentation private, so what do we do next?

ourcloudnetwork.com
9
10
1
57
4,953
We still laugh about this moment three years later…! 😂
Sam Erde@SamErde20 May 2023
Wife: What’s this thing plugged into the wall? Sam: It’s a @Ubiquiti Beacon HD. Wife: A u-bippity-boppity-what?! 😂
A Ubiquiti AP Beacon HD plugged into a wall outlet.

ALT A Ubiquiti AP Beacon HD plugged into a wall outlet.

13
969
Sam Erde retweeted
Sam Erde@SamErde27 Feb 2025
If you're unable to run Active Directory PowerShell scripts because RSAT is not on your computer and you don't have admin rights to install it, there are still options. Example: this line in PowerShell will get you the FQDN of a global catalog domain controller:
5
18
176
16,837
Sam Erde retweeted
Sam Erde@SamErdeSep 28
Replying to @GithubProjects
Shouldn’t the guide just say “stop posting your API keys into every agent?” 🤭😉 I really like the idea, but we MUST secure our tools and credentials first, THEN do the awesome things!
1
1
195
Honestly, how did Gmail not filter this spam immediately?! 😨
1
5
1,011
Microsoft Scout is now “Autopilot.” I’m sure that won’t confuse anyone. 😆 Maybe they should have called it “Surface Duo” or “Zune.” 😋
This quoted post is unavailable.
Try viewing anyway · View on X
8
1
1
47
5,755
Defender for Identity sensor v3 on ADFS, ADCS, and Entra Connect sync is now in preview! 🥳 Make sure you have at least one, reachable DC running the v3 sensor as well ;)
6
26
1
122
9,781
Sam Erde retweeted
Joe Stocker
@ITguySoCalSep 24
ISOC in Microsoft Defender is a benefit for M365 E5 and E7 customers, it is not a new product. Those lucky customers will save 44% off 3P security log ingestion. I spent all day reading and broke it down here to bring it to you straight: patriotconsulting.com/blogs/…

ISOC in Microsoft Defender: Not a New Product, a New E5 and E7 Benefit | Patriot Consulting

ISOC in Microsoft Defender is not a new security product. It is a new benefit for Microsoft 365 E5 and E7 customers: 90 days of Defender retention, built-in SIEM features, and a $2.40/GB ingestion...

patriotconsulting.com
Microsoft Security
@msftsecuritySep 23
XDR and SIEM now in one platform. Meet the new ISOC in Microsoft Defender—a SOC built for agentic security. Here to help you investigate and respond more efficiently. msft.it/6019ag5T1
7
40
311
885,241
It's a gray, rainy, Astra High on Fast kind of day. 👨‍💻
6
313
I’m getting my em dash back! Being able to read and actually understand the output from Claude models is going to be a nice change as well. 🤭
Claude
@claudeaiSep 22
Replying to @claudeai
Opus 5.5 communicates more naturally, addressing some of the most common feedback we heard on Opus 5. It puts the most important information up front and follows the writing rules you give it, which makes long sessions easier to follow.
3
429
In which we talk about Active Directory and other things you might monitor with Maester. 🕵️‍♂️
Merill Fernando
@merillSep 17
Developers wouldn't ship without tests. Identity teams ship changes to a 30-year-old directory every single day with nothing but a change ticket and hope. Maester now tests on-prem Active Directory: 269 checks, read-only, runs from your workstation. Built by Mike Soule, who joins @SamErde and me on this week's Entra.Chat to go through what it covers and how to run it safely. Let's bring Sec DevOps practices to Active Directory! There's no good reason not to have a baseline. Watch the full episode on entra.chat #ActiveDirectory #Maester #PowerShell #IdentitySecurity
2
8
1,092
Load more