Cybersecurity Architect | Securing Microsoft Cloud (Identity, Endpoint & Data)
Joined August 2024
- Tweets354
- Following283
- Followers59
- Likes875
shellgio_ retweeted
New Microsoft Entra ID role:
Entra SOC Identity Responder
◽ Enable/Disable users
◽ Revoke active sessions
◽ Reset password
Great effort to make response actions more granular.
shellgio_ retweeted
An HONOR to be heading to @wpninjasus where I'll be running a live demo-heavy session of tips and tricks on how to secure the **** out of a tenant in <1 hour. We'll start with the defaults then I'll talk folks through what actually works, what sounds good but doesn't really help, and how to avoid breaking everything as we lock it all down.
Let me know if I'll see you there!
shellgio_ retweeted
the irony of being a woman earning a CCNA that leads to a job + financial freedom… in part due to educational material from a man who believes you should be confined to the home, barefoot & pregnant in the kitchen
The same organizations that say that they are adopting AI are the same organizations that adopted collaboration and still use e-mail 99% of the time.
shellgio_ retweeted
Check it out, Microsoft have just given Security Administrators more permissions in Entra > ourcloudnetwork.com/microsof…
Now the Security Administrator can:
• Enable a user account
• Disable a user account
• Invalidate refresh tokens on a user account
• Update the password on a user account
This comes after Microsoft recently split these actions from the User Administrator role by creating the Entra SOC Identity Responder role!
All happening silently I might add!!
#Entra #News #Microsoft
shellgio_ retweeted
If you want to go deeper than the docs on the new Defender Controlled Configuration feature, check out Thomas' article here :)
Still some nuances that remain to be seen, but docs and code point out this may eventually extend to areas like device control, EDR, and firewall 😎
vertho.tech/2026/08/13/defed…
here you go Champ ;)
shellgio_ retweeted
Have you seen this warning yet? I feel Microsoft are preparing to enforce license compliance in Entra > ourcloudnetwork.com/are-micr…
New licensing usage reporting and active warning messages make me feel like Microsoft are on the verge of something bigger...
Right now, it's clear some organisations are abusing the mechanics behind Microsoft Entra, I see it all the time. That one "test" premium license that never gets removed normally gets benefited from by the whole organisation, then what incentive does a business have to buy the correct amount...
But, let's not be mistaken. Microsoft can already see your utilisation from their own telemetry system. A small amount of overage is expected, considering guest users and the "one person, one license" philosophy. But with high overage, you may be asking for trouble.
Do you expect Microsoft are planning something bigger here?
#Microsoft #Entra #News
Want to postpone Passkeys by Default in Microsoft Entra ID? 🔐
If you're not ready yet, there's a temporary opt-out.
I wrote a practical guide showing how to and PowerShell script:
📖 shellgio.net/how-to-opt-out-…
💻 github.com/Shellgio/set-Entr…
When you postpone it now you'll have time to plan it. Check out this @merill post about how to plan your passkeys migration:
xitter.cf/merill/status/20869577…
🛡️Level up your career with the @msftsecurity Defender Skilling Challenge! 🚀
Want to prepare for SC-200 or SC-500 and get a chance to win a 50% discount voucher? Complete the challenge by August 21 on @MicrosoftLearn ! 🎓✨
Check it out: msft.it/6013vhruV
shellgio_ retweeted
Folks, Maester 2.2 is here!!
It was just a couple of months ago when we launched Maester 2.0 and the amazing Maester community has been SUPER busy.
The biggest news is support for Active Directory is now in preview thanks to Mike Soule and we have some really cool plans for Active Directory with @PrzemyslawKlys and his awesome TestimoX AD suite. Stay tuned on this.
We've added tests for so many new products (and sorry you need to sign in more times because not every Microsoft product uses Graph anymore 🤷♀️).
That includes Copilot config, Dataverse, SharePoint, Github (as more folks move agentic devlops to GitHub this is going to be super important), new Intune and Entra ID checks and so much more.
Here are the highlights
🔥 269 Active Directory checks across identity, policy, infrastructure, DNS, trusts, replication, and access control
🔥 5 Microsoft Purview checks to get your data security foundations ready for Copilot and AI
🔥 12 new SharePoint Online checks across the CIS and CISA baselines, now cross-platform with PnP.PowerShell
🔥 5 CIS GitHub organization controls and first-class GitHub connectivity
🔥 9 Global Secure Access checks for Private Access, forwarding profiles, Compliant Network, and Internet Access
🔥 4 Intune endpoint security checks for LAPS, attack surface reduction, App Control for Business, and Managed Installer
🔥 New Entra ID checks covering agent risk, directory sync safeguards, Conditional Access gaps, legacy MSOnline, and privileged first-party apps
🔥 A sharper report with markdown summaries, per-test durations, and critical findings sorted first
🔥 Contributor credits across maester.dev, so the people writing these tests get the recognition they deserve
Huge thanks to our contributors Artem Borodai, @BrianReidC7, @cbrhh, Christopher Edwards, @fabian_bader, Henrik Piecha, @janbakker_, Jean-Philippe George, Jon Gross, Jonathan Hope, Loïc Michel, Massimo Mazzariol, Matthias F., Mike Soule, Morten Mynster Kristensen, Ofir Gavish, @SamErde, Simon Albers, Stephan van Rooij, @thomas_live, Thomas Schmidt, Travis McDade, Truls Dahlsveen
(PS Please let me know if I've missed anyone)
Plus a huge personal thank you from me to all the maester.cloud founding sponsors maester.cloud/founders who have helped me go full time on Maester. This release wouldn't have been possible without you.
Learn all about this release at maester.dev/blog/maester-2-2
shellgio_ retweeted
One tiny change to my VS @code configuration has made life a lot easier for me. Markdown documents now open in preview by default, instead of in the editor. Editing them is still as simple as a double-click! Anyone with me?
ALT Square VS Code-themed infographic titled “Open Markdown in Preview by Default.” Two configuration methods are shown side by side. Option 1 uses the Settings UI: press Ctrl plus comma or Cmd plus comma, search for “Editor Associations,” find “Workbench: Editor Associations,” select “Add Item,” then enter `*.md` as the key and `vscode.markdown.preview.editor` as the value. Option 2 edits `settings.json`: open the Command Palette with Ctrl or Cmd plus Shift plus P, select “Preferences: Open User Settings (JSON),” and add a `workbench.editorAssociations` entry mapping `*.md` to `vscode.markdown.preview.editor`. Below the options, a simplified VS Code window shows Markdown source for a README on the left and its rendered preview on the right. Footer text reads, “This one small change made working with project documentation much easier for me.”
La de posts que van a haber mañana en LinkedIn tipo "lo que nos ha enseñado la victoria de España en el mundial".
🚨🆕 New blog post:
I’ve been wanting to improve my powershell skills with DLP and I’ve been digging recently into @MicrosoftLearn to read about using the AdvanceRule parameter to read, save and create DLP rules with complex logic conditions.
🔗 shellgio.net/quick-way-copy-…
Seems like there is an issue either viewing trainable classifiers or creating DLP rules that use them either using powershell or portal, giving this error:
"[Microsoft.Exhange.Management.UnifiedPolicy.MLModelsNotAvailableException|There are no ML Models available for the tenant."
Has anybody else experienced this? Haven't tried it with autolabelling policies that use trainable classifiers.
In my case I'm talking about built-in classifiers,not custom. I'm not aware on changes of the trainable classifiers