Evilginx resources for Microsoft 365
Okay, let's start with a disclaimer. This post is created for educational purposes and mainly focuses on red and blue teamers to protect their Microsoft 365…
Archive
Posts
A love story about Role Based Access Control for Applications in Exchange Online, Managed Identities, Entra ID Admin Units, and Graph API
I've learned something new today. Hear me out.
Prepare for passkeys in Entra ID!
Only a few months until Microsoft Entra ID will support device-bound passkeys stored on computers and mobile devices as an authentication method in preview, in…
How to create a Temporary Access Pass using Logic Apps
Now that more and more organizations are moving towards passwordless, a Temporary Access Pass becomes indispensable for onboarding and recovery. Using Logic…
Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths.
As you may or may not know, most FIDO2 security keys can be set up with easy PINs like 1111 or 123456. Just like passwords, users tend to come up with…
Manage user-preferred multi-factor authentication method in Microsoft Entra ID
This post is all about setting the preferred multi-factor authentication method using Graph API. We already know the system-preferred multi-factor…
Company branding and custom CSS in Azure Active Directory
Company branding in Azure AD is a nice feature that allows administrators to prettify the sign-in experience for their end-users. It also comes with the…
Running Evilginx 3.0 on Windows
In case you missed it: Evilginx 3 was recently launched to the public. This release is a quality-of-life update and has many fixes and a few new features…
Step-up authentication with Defender for Cloud Apps and Authentication Context
In this post, I will show you how you can integrate Azure AD's Authentication Context with Defender for Cloud Apps to require step-up authentication for…
Send an email on a new Azure MFA method registration
I've done quite some Azure MFA projects over time (and counting), and as we mainly focus on the technical side, there are also practical sides to consider.…
Microsoft icons
That's the post for today. Just a bunch of sources with icons from Microsoft 365, Azure, Azure AD, and other Microsoft-related services. This can be super…
Report Suspicious Activity & Fraud Alert for Azure MFA
A new feature popped up in Azure AD. Well, not entirely new, I must say. Reading from the docs, Report Suspicious Activity is an enhancement of the Fraud Alert…