Cloudbrothers
Azure Attack Paths
Posts
Kategorien
Über mich
Talks
Deutsch
english
Deutsch
Cloudbrothers
Abbrechen
Azure Attack Paths
Posts
Kategorien
Über mich
Talks
Deutsch
english
Deutsch
Alle Kategorien
PowerShell
Going passwordless with Window Hello for Business and SCRIL
Sentinel Pester Framework
Convert Sentinel Analytics Rules with PowerShell
AnalyticsRules.Exchange
Azure Attack Paths
Mehr >>
Azure AD
Going passwordless with Window Hello for Business and SCRIL
From on-prem to Global Admin without password reset
Conditional Access Authentication strength
Continuous access evaluation
Use Unified Sign-In logs in Advanced Hunting
Mehr >>
Azure
Conditional Access Authentication strength
Use UEBA in Microsoft Sentinel to your advantage
Use Unified Sign-In logs in Advanced Hunting
Azure Attack Paths
Persistence with Azure Policy Guest Configuration
Mehr >>
Security
Going passwordless with Window Hello for Business and SCRIL
From on-prem to Global Admin without password reset
AnalyticsRules.Exchange
Conditional Access Authentication strength
Use UEBA in Microsoft Sentinel to your advantage
Mehr >>
Identity and Access
Going passwordless with Window Hello for Business and SCRIL
From on-prem to Global Admin without password reset
Continuous access evaluation
Just-In-Time role assignment in Microsoft Defender
Änderungen an sensitiven on-Prem Gruppen mit MDI alarmieren
Mehr >>
KQL
Sentinel Pester Framework
From on-prem to Global Admin without password reset
Convert Sentinel Analytics Rules with PowerShell
Prevent phishing based on domain registrations
Integrate MDI health alerts in Microsoft Sentinel
Mehr >>
Conditional Access
Continuous access evaluation
Bypass sensitivity label restrictions with mobile Edge and conditional access policies
Journey To Passwordless: FIDO2 Schlüssel einschränken & Fazit
Journey To Passwordless: Microsoft Authenticator App
Journey To Passwordless: Administrieren mit PowerShell und ohne Passwort
Mehr >>
SQL
24 Hours of PASS: Summit Preview 2018
SQL Server 2017 Cumulative Update 7
Linux SQL Server 2017 auf Docker mit der Stack Overflow Demo Datenbank
SQL Server 2014 SP2 Cumulative Update 10
SQL Server 2017 Cumulative Update 3
Mehr >>
Defender for Endpoint
From on-prem to Global Admin without password reset
Prevent phishing based on domain registrations
Microsoft Defender for Endpoint Device Health
Update to the Hitchhiker's Guide to Microsoft Defender for Endpoint exclusions
Gradual rollout process for Microsoft Defender
Mehr >>
Microsoft 365
The case of the... MapiExceptionShutoffQuotaExceeded
Microsoft 365 Lizenzübersicht
Legacy Authentication kontrolliert abschalten - Abschaltung
Legacy Authentication kontrolliert abschalten - Die nächsten 9%
Legacy Authentication kontrolliert abschalten - Die ersten 90%
Mehr >>
FIDO2
Going passwordless with Window Hello for Business and SCRIL
Conditional Access Authentication strength
Why using a FIDO2 security key is important
Journey To Passwordless: FIDO2 Schlüssel einschränken & Fazit
Journey To Passwordless: Microsoft Authenticator App
Mehr >>
Passwordless
Going passwordless with Window Hello for Business and SCRIL
Windows Hello for Business Cloud Trust and KDC proxy
Why using a FIDO2 security key is important
Journey To Passwordless: FIDO2 Schlüssel einschränken & Fazit
Journey To Passwordless: Microsoft Authenticator App
Mehr >>
Windows Server
Gradual rollout process for Microsoft Defender
Current limits of Defender AV Tamper Protection
Defender for Identity, Npcap und Windows Server 2022
SCHANNEL Einstellungen des Azure Windows Marketplace image geändert
The case of the... WS_E_OPERATION_TIMED_OUT
Mehr >>
Automation
Zertifikatsmanagement mit Azure Automation und Let's Encrypt
AzureRM.Network 0.9 macht Probleme mit Azure Automation
Azure Resource Manager API Übersicht
Azure Automation: Inventory, Change Tracking und Update Management GA
Azure Automation - Erweiterte Parameterverarbeitung
Mehr >>
Sentinel
Sentinel Pester Framework
From on-prem to Global Admin without password reset
Convert Sentinel Analytics Rules with PowerShell
Prevent phishing based on domain registrations
Integrate MDI health alerts in Microsoft Sentinel
Mehr >>
Defender AV
Microsoft Defender for Endpoint Device Health
Update to the Hitchhiker's Guide to Microsoft Defender for Endpoint exclusions
Gradual rollout process for Microsoft Defender
The Hitchhiker's Guide to Microsoft Defender for Endpoint exclusions
Current limits of Defender AV Tamper Protection
Mehr >>
MFA
Conditional Access Authentication strength
Windows Hello for Business Cloud Trust and KDC proxy
Why using a FIDO2 security key is important
Warum die neue MFA Registrierung deinen Benutzern hilft
Mehr Azure MFA mit NPS
Mehr >>
User Group
Vortrag @ Microsoft 365 Security & Compliance User Group
Vortrag @ Cloud Identity Summit 2022
Vortrag @ Cloud Workplace Meetup
Vortrag @ Microsoft Cloud Security User Group
Vortrag @ Trust in Tech Cologne
Mehr >>
Analytics Rules
Sentinel Pester Framework
From on-prem to Global Admin without password reset
Convert Sentinel Analytics Rules with PowerShell
Prevent phishing based on domain registrations
Integrate MDI health alerts in Microsoft Sentinel
Mehr >>
Exchange
The case of the... MapiExceptionShutoffQuotaExceeded
PowerShell Tipp: SPF Records abfragen
Exchange 2003 Relay Einstellungen exportieren
Sprache eines Exchange 2010 Postfaches ändern
Exchange DAG Postfachspeicher verschieben
Mehr >>
Windows
Gradual rollout process for Microsoft Defender
Current limits of Defender AV Tamper Protection
Defender for Endpoint - Did the Antivirus scan complete?
Einen Netzwerk Trace ohne Wireshark erstellen
UDP Verbindung mit PowerShell prüfen
Mehr >>
Active Directory
Going passwordless with Window Hello for Business and SCRIL
From on-prem to Global Admin without password reset
Exploit samAccountName spoofing with Kerberos
Gruppenrichtlinien mit PowerShell verwalten
Änderungen an sensitiven on-Prem Gruppen mit MDI alarmieren
Log Analytics
AnalyticsRules.Exchange
Use Unified Sign-In logs in Advanced Hunting
Operator mvexpand: expanded expression expected to have dynamic type
Report des Log Analytics Workspace für alle Azure VMs
Azure Log Analytics - RegEx Groß-Kleinschreibung ignorieren
Network
Einen Netzwerk Trace ohne Wireshark erstellen
UDP Verbindung mit PowerShell prüfen
Optimize your Microsoft Teams traffic with QoS on a UniFi USG
Eine freie IP Adresse in Azure finden
Cisco DHCP Range pro VLAN
DSC
Persistence with Azure Policy Guest Configuration
Die Zukunft von DSC
DSC Ressource Namenskoventionen
DSC Resource Kit - November 2017
Office 365
Microsoft 365 Lizenzübersicht
Optimize your Microsoft Teams traffic with QoS on a UniFi USG
Ist diese IP Adresse Teil des Office 365 Adressbereiches?
Azure AD Groups - Premium Features
PKI
Golden Certificate and OCSP
The case of the... Intune SCEP Profil hängt im Status "Pending"
The case of the... WS_E_OPERATION_TIMED_OUT
Computer Kerberos Ticket und Zertifikatscache löschen
The case of the
The case of the... MapiExceptionShutoffQuotaExceeded
The case of the... Die von Ihnen verwendete Anmeldemethode ist nicht zulässig
The case of the... Intune SCEP Profil hängt im Status "Pending"
The case of the... WS_E_OPERATION_TIMED_OUT
Advanced Hunting
Use Unified Sign-In logs in Advanced Hunting
Änderungen an sensitiven on-Prem Gruppen mit MDI alarmieren
Automatisch C2 traffic auf Endgeräten erkennen
Defender for Identity
Integrate MDI health alerts in Microsoft Sentinel
Änderungen an sensitiven on-Prem Gruppen mit MDI alarmieren
Defender for Identity, Npcap und Windows Server 2022
HHPSUG
Gruppenrichtlinien mit PowerShell verwalten
Hamburg PowerShell User Group #1
Hamburg PowerShell User Group
Microsoft 365 Defender
From on-prem to Global Admin without password reset
Prevent phishing based on domain registrations
Integrate MDI health alerts in Microsoft Sentinel
NPS
Mehr Azure MFA mit NPS
Undokumentierte Parameter der Azure MFA NPS Erweiterung
Die Azure MFA RADIUS Challenge!
SAN
Brocade NTP Konfiguration
NetApp - ALUA aktivieren
Welche LUN verursacht die "FCP Partner Path misconfigured" Meldungen
Tools
posh-HumpCompletion
Computer Kerberos Ticket und Zertifikatscache löschen
Visual Studio Code v1.18 veröffentlicht
AAD Sync
From on-prem to Global Admin without password reset
Azure AD Sync - Höchstwert für Objektlöschungen bei der Identitätssynchronisierung erreicht
ADFS
ADFS Help
ADFS Open Source Tools auf GitHub
ARM
Azure Availability Sets vNet Abhängigkeit
Azure Resource Manager API Übersicht
Defender for Office 365
Integrate MDI health alerts in Microsoft Sentinel
Detect and alert on unusual high phish or malware email volume
Docker
SQL Server 2017 Cumulative Update 7
Linux SQL Server 2017 auf Docker mit der Stack Overflow Demo Datenbank
Intune
The case of the... Die von Ihnen verwendete Anmeldemethode ist nicht zulässig
The case of the... Intune SCEP Profil hängt im Status "Pending"
Module
AzureSimpleREST Module
PowerShell Modul Entwicklung: Pester Tests
NetApp
NetApp - ALUA aktivieren
Welche LUN verursacht die "FCP Partner Path misconfigured" Meldungen
Pester
Sentinel Pester Framework
PowerShell Modul Entwicklung: Pester Tests
TIL
Operator mvexpand: expanded expression expected to have dynamic type
TIL BitLocker + YubiKey = ❤️
Azure Stack
OPENedX - Configuring and Operating Microsoft Azure Stack
Backup
"Reverse engineering" der Azure REST API
Defender
Gradual rollout process for Microsoft Defender
DevOps
Azure OpenDev
Encryption
Bessere Verschlüsselung dank Lavalampen
Entra
Conditional Access Authentication strength
Excel
Report des Log Analytics Workspace für alle Azure VMs
GPO
Gruppenrichtlinien mit PowerShell verwalten
Intel
SQL Server und Meltdown und Spectre
Kerberos
Exploit samAccountName spoofing with Kerberos
Let's Encrypt
Zertifikatsmanagement mit Azure Automation und Let's Encrypt
Microsoft Information Protection
Bypass sensitivity label restrictions with mobile Edge and conditional access policies
Microsoft Teams
Optimize your Microsoft Teams traffic with QoS on a UniFi USG
OMS
Report des Log Analytics Workspace für alle Azure VMs
Printer
Ein Drucker oder Aufträge in der Druckerwarteschlange löschen
Proxy
Proxy, Proxy an der Wand...
PSScriptAnalyzer
PowerShell Modul Entwicklung: Pester Tests
REST
"Reverse engineering" der Azure REST API
UniFi
Optimize your Microsoft Teams traffic with QoS on a UniFi USG
VMware
Hilfe bei doppelten PowerShell cmdlet Namen
YubiKey
TIL BitLocker + YubiKey = ❤️