Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by AppDisplay Name
Microsoft Sentinel Scheduled Analytics Rule not triggering
jasonsmyth (jasonsmyth) March 27, 2025, 5:06pm 1 Hello, I am trying to trigger the following KQL query in a custom scheduled Analytics Rule… It is to identify ANY Global Administrator and verify if they have committed any activity (Sign-in) over the last 24 hours. Simple testing is to get a Global Administrator to sign in within the last 24 hours.
Hunting M365 Invaders: Blue Team's Guide to Initial Access Vectors
By January 04, 2024 Microsoft 365 (formerly Office 365) is Microsoft's cloud-based suite of productivity tools, which includes email, collaboration platforms, and office applications. All are integrated with Entra ID (referred to as Azure AD in this post) for identity and access management. M365’s centralized storage of organizational data, combined with its ubiquity and widespread adoption, make it a common target of threat actors.
Running natural language queries against Log analytics using Semantic function
Given an input question, first create a syntactically correct {dialect} query to run, then look at the results of the query and return the answer.
Token theft playbook
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 07/28/2023 In this article This article, and its accompanying decision tree, provide guidance for security analysts and incident responders to identify and investigate token theft attacks in an organization. As organizations increase their security posture, threat actors use more sophisticated techniques to compromise resources.
Token protection in Azure AD Conditional Access - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 03/09/2023 6 minutes to read In this article Token protection (sometimes referred to as token binding in the industry) attempts to reduce attacks using token theft by ensuring a token is usable only from the intended device. When an attacker is able to steal a token, by hijacking or replay, they can impersonate their victim until the token expires or is revoked.
Cross-tenant access overview - Azure AD - Microsoft Entra
Read in English Read in English Edit Twitter LinkedIn Facebook Email Article 01/13/2023 10 minutes to read In this article Azure AD organizations can use External Identities cross-tenant access settings to manage how they collaborate with other Azure AD organizations and other Microsoft Azure clouds through B2B collaboration and B2B direct connect.
Cross-tenant access overview - Azure AD - Microsoft Entra
Read in English Read in English Feedback Edit Twitter LinkedIn Facebook Email Article 08/05/2022 10 minutes to read In this article Azure AD organizations can use External Identities cross-tenant access settings to manage how they collaborate with other Azure AD organizations and other Microsoft Azure clouds through B2B collaboration and B2B direct connect.
Enable TLS 1.2 support as Azure AD TLS 1.0/1.1 is deprecated - Active Directory
11/19/2021 11 minutes to read D v g s v In this article To improve the security posture of your tenant, and to remain in compliance with industry standards, Microsoft Azure Active Directory (Azure AD) will soon stop supporting the following Transport Layer Security (TLS) protocols and ciphers: TLS 1.1 TLS 1.0 3DES cipher suite (TLS_RSA_WITH_3DES_EDE_CBC_SHA) How this change might affect your organization Do your applications communicate with or authenticate against Azure Active Directory?
Machine Learning powered detections with Kusto query language in Azure Sentinel
This post is co-authored by Tim Burrell, Principal Security Engineering Manager and Dotan Patrich, Principal Software Engineer. As cyberattacks become more complex and harder to detect. The traditional correlation rules of a SIEM are not enough, they are lacking the full context of the attack and can only detect attacks that were seen before. This can result in false negatives and gaps in the environment.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with AppDisplay
Contact AppDisplay, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack