Prevent AiTM with Microsoft Entra Global Secure Access and Conditional Access
Microsoft Entra Global Secure Access brings a new control to Conditional Access. By installing the Global Secure Access Client on (hybrid) Entra joined devices…
Category
Security
Evilginx resources for Microsoft 365
Okay, let's start with a disclaimer. This post is created for educational purposes and mainly focuses on red and blue teamers to protect their Microsoft 365…
A love story about Role Based Access Control for Applications in Exchange Online, Managed Identities, Entra ID Admin Units, and Graph API
I've learned something new today. Hear me out.
Prepare for passkeys in Entra ID!
Only a few months until Microsoft Entra ID will support device-bound passkeys stored on computers and mobile devices as an authentication method in preview, in…
How to create a Temporary Access Pass using Logic Apps
Now that more and more organizations are moving towards passwordless, a Temporary Access Pass becomes indispensable for onboarding and recovery. Using Logic…
Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths.
As you may or may not know, most FIDO2 security keys can be set up with easy PINs like 1111 or 123456. Just like passwords, users tend to come up with…
Manage user-preferred multi-factor authentication method in Microsoft Entra ID
This post is all about setting the preferred multi-factor authentication method using Graph API. We already know the system-preferred multi-factor…
Running Evilginx 3.0 on Windows
In case you missed it: Evilginx 3 was recently launched to the public. This release is a quality-of-life update and has many fixes and a few new features…
Step-up authentication with Defender for Cloud Apps and Authentication Context
In this post, I will show you how you can integrate Azure AD's Authentication Context with Defender for Cloud Apps to require step-up authentication for…
Send an email on a new Azure MFA method registration
I've done quite some Azure MFA projects over time (and counting), and as we mainly focus on the technical side, there are also practical sides to consider.…
Report Suspicious Activity & Fraud Alert for Azure MFA
A new feature popped up in Azure AD. Well, not entirely new, I must say. Reading from the docs, Report Suspicious Activity is an enhancement of the Fraud Alert…
Authenticator Lite - Approve Azure MFA prompts with the Outlook app
Microsoft released a new feature where the Outlook mobile app now has some of the Microsoft Authenticator App features onboard. Users can now enroll for Azure…