Let’s discuss one of my more “unpopular” opinions. Microsoft states in its documentation the following: Password expiration requirements do more harm than good because these requirements make users select predictable passwords, composed of sequential words and numbers that are closely related to each other. In these cases, the next password can be predicted based on […]
Speaker session about incident response using Microsoft Defender at Cloud Technology Townhall Tallinn (cloudtechtallinn.com)
To PIM or not To PIM, How is the Question In our recent Privileged Identity Management (PIM) session, my colleague Michael Van Horenbeeck and I shifted the focus from the decision of whether to implement PIM, as unanimity prevailed on that front. Instead, we honed in on the practical nuances of utilizing PIM effectively. PIM […]
Had an incredible time at the recent Belgian Microsoft Cloud & Security Community Event, and I’m thrilled to share highlights from the event in my latest video! 🌐 Organizer Spotlight: Michael Van Horenbeeck Michael provided invaluable insights into what makes the community thrive and the incredible impact it has on fostering collaboration in the Microsoft […]
Join us in this eye-opening video as we delve into the world of cybersecurity and take on a real-life Adversary-in-the-Middle (AITM) attack. We’ll explain what an AITM attack is and, in a daring move, intentionally subject ourselves to a phishing attempt to gain insights into how we can better safeguard our online security. In this […]
On 25 May, my colleague Thijs Lecomte & and I were guest at Come get IT. Sander Bruijs & Martijn Verheij, hosts of the podcast, invited us after hearing our talk about Incident Response using Microsoft Technology. You can listen to podcast via this link with timestamp 43:48CGIT Extra – Experts Live! 2023 – Come […]
In this video, we go over the strengths of a FIDO 2 and how we can use “authentication context” in a conditional access policy to require FIDO2 as an MFA method. If you want to secure your precious accounts with an extra security layer, this video might spark your interest. We are configuring that an […]
I was preparing a video about not-phish able authentication methods and I wanted to register my ATKey.Pro FIDO (type C) to my authentication methods. At the end of my registration flow I was confronted with this pop-up. Azure AD audit logs The error message gives the indication more info can be found in Azure AD. […]