Jean-Philippe Lesage retweeted
It appears Microsoft quietly mitigated most of the risk of the "Intune company portal" device compliance CA bypass by restricting the scope of Azure AD graph tokens issued to this app, making them almost useless for most abuse scenarios. Thx @domchell for the heads up.
Jean-Philippe Lesage retweeted
Exploring Quality Prompting Techniques in Copilot for Security xitter.cf/i/broadcasts/1mrGmyrYM…
Jean-Philippe Lesage retweeted
Microsoft has uncovered an attack that exploits critical vulnerabilities in OpenMetadata to gain access to Kubernetes workloads and leverage them for cryptomining activity. Get our analysis, IOCs, and investigation guidance: msft.it/6012YB57m
Jean-Philippe Lesage retweeted
A new webinar series is starting next week! We will kick off with ITDR - read everything about it here: techcommunity.microsoft.com/… #cybersecurity #infosec
Jean-Philippe Lesage retweeted
BOOM!!!! 😎 Just published the official Copilot for Security GitHub Community!!! LOOOOTS of prompting samples, guidelines, playbooks, plugins, workshops and much more 🔥 github.com/Azure/Copilot-For… #GitHub #Cybersecurity #CopilotForSecurity #Copilot #infosec
Jean-Philippe Lesage retweeted
Protect your organization with the help of Microsoft Copilot, now available for security. Check out this blog post to explore more of the top prompts already being used: msft.it/6013c0vEX #MicrosoftCopilot #GenAI
Jean-Philippe Lesage retweeted
Microsoft will now publish root cause data for Microsoft CVEs using the Common Weakness Enumeration (CWE) industry standard. Learn more:
We are pleased to announce that we will now publish root cause data for all Microsoft CVEs using the Common Weakness Enumeration (CWE) industry standard. This standard will facilitate more effective community discussions about finding and mitigating these weaknesses in existing software and hardware, while also minimizing them in future updates and releases.
Learn more in our blog post: msrc.microsoft.com/blog/2024…
Jean-Philippe Lesage retweeted
In this episode we show you how to manage custom plugins in Copilot for Security, with great demos > youtube.com/watch?v=pmUYJzFh… #cybersecurity #copilot #infosec #copilotforsecurity
Jean-Philippe Lesage retweeted
Kicking off @Microsoft #Sentinel in the Field ‼️
In this episode @Crisromeo18 and myself talk to Nayef Yassin about the new Microsoft Sentinel Repositories feature to manage your security content as code. 🛡️🚀
@msftsecurity #devops #iac #devsecops
youtube.com/watch?v=vqLqJhaF…
Jean-Philippe Lesage retweeted
🚨 Learning how to install #Sysmon for Linux 🐧 & send security events to #AzureSentinel in a research lab environment!! 🧪 #MSTIC #Microsoft
📡 Sysmon (SysinternalsEBPF) -> Syslog -> SIEM 🚀
✅ Scripts
✅ ARM templates
✅ Sysmon configs and more..
techcommunity.microsoft.com/…
Jean-Philippe Lesage retweeted
Today, Microsoft is open sourcing Cloud Katana, a cloud-native serverless application built on the top of Azure Functions to assess security controls in the cloud and hybrid cloud environments. Read about the design principles and learn how to deploy: msft.it/6011n46MT
Jean-Philippe Lesage retweeted
Just uploaded two long awaited Student Use Benefits licensing diagrams (in pdf) to my GitHub repo:
github.com/AaronDinnage/Lice…
Notes:
1. PNG and Visio versions will come with the next major update.
2. Refer to the Product Terms for full Student Use Benefit details.
#Microsoft365
Jean-Philippe Lesage retweeted
When hackers leverage poor on-prem security to propagate to the Cloud. SolarWinds Post-Compromise Hunting with Azure Sentinel techcommunity.microsoft.com/…
Jean-Philippe Lesage retweeted
I'm very pleased to announce the December 2020 update to my #Microsoft365 licensing diagrams is now on GitHub. This is a large update to the previous diagrams so please read the Change Log for further details. Future updates will be smaller & more regular.
github.com/AaronDinnage/Lice…
Jean-Philippe Lesage retweeted
You want to get started with "Advanced hunting"? Come and learn the rich KQL query language to hunt across your data by watching this series "Tracking the adversary" techcommunity.microsoft.com/… #threathunting #cybersecurity #threatprotection #xdr
Jean-Philippe Lesage retweeted
Today is an exciting day! We're expanding the scope of this social channel beyond Microsoft Defender for Endpoint to cover all the products that are part of our SIEM & XDR solutions. Thank you to our many fans for being part of this journey! Learn more at aka.ms/siemandxdr
Jean-Philippe Lesage retweeted
Are you already a Microsoft Defender ATP Ninja? 😈 Great, here is your September update to stay up-to-date!
techcommunity.microsoft.com/… #mdatp #cybersecurity #onlinetraining #ninjatraining
Jean-Philippe Lesage retweeted
MITRE Engenuity’s Center for Threat-Informed Defense published a FIN6 adversary emulation plan, a collection of threat intelligence, MITRE ATT&CK data, supporting scripts, utilities. Microsoft is proud to be part this industry-wide collaborative project. msft.it/6015TtfB3
Jean-Philippe Lesage retweeted
Watch the fifth episode of #ASCInTheField with host @yuridiogenes and learn about the continuous export and workflow automation features in Azure Security Center:
msft.it/6010TtLc2
Jean-Philippe Lesage retweeted
For a limited time, get $25,000 of Azure credits when you ingest an average of 50GB/day into #Azure Sentinel for three consecutive months. msft.it/6010Tt6Nm



















