#videotutorial — Public Fediverse posts

𝗛𝗼𝘄 𝘁𝗼 𝗱𝗶𝘀𝗮𝗯𝗹𝗲 𝗦𝗲𝗹𝗳-𝗦𝗲𝗿𝘃𝗶𝗰𝗲 𝗣𝗮𝘀𝘀𝘄𝗼𝗿𝗱 𝗥𝗲𝘀𝗲𝘁 𝗳𝗼𝗿 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗

Self-service password reset can be a useful feature that allows users to access their account in case they forget their password.

On the other hand, it is potentially risky, as a potential attacker may target the self-service password reset feature to gain access to the account. Especially for privileged accounts, this is very risky and therefore I would generally recommend disabling self-service password resets for privileged accounts.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/KIlRPx_9XRA

#cswrld #videotutorial #sspr #passwordreset #entraid #administrators

Ya se aproxima el #28J #pride 🏳️‍🌈, fecha en que en todo el mundo se conmemoran los disturbios de Stonewall.

Para ello, he liberado un #fanzine 📄 con un #videotutorial 🎥 donde podrás aprender a confeccionar en casa una bandera #LGBTIQANB 🧵 de franjas.

Puedes descargarlo desde mi #KoFi ☕ https://ko-fi.com/s/4ec82cf2b1 y ver el video en: https://video.anartist.org/w/6Rfurpp93Z3AHXMCE8DPGy.

Como siempre, se agradece compartir 💞 este fanzine y los aportes solidarios ✊ para seguir autogestionando este taller.
#autogestion #costura

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗰 𝗲𝗺𝗮𝗶𝗹 𝗳𝗼𝗿𝘄𝗮𝗿𝗱𝗶𝗻𝗴 𝗶𝗻 𝗢𝗳𝗳𝗶𝗰𝗲 𝟯𝟲𝟱

Automatic email forwarding is very risky. First, it can lead to exfiltration of sensitive internal information outside the corporate environment. But it can also cause account compromise, for example through password reset whose code arrives at some external address that may be under the control of an attacker.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/sdjG-gl6Xxs

#cswrld #videotutorial #email #forwarding #office365 #exchangeonline

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗮𝗰𝗸𝘂𝗽 𝗢𝗳𝗳𝗶𝗰𝗲 𝟯𝟲𝟱 𝗱𝗮𝘁𝗮

Right off the bat, you might be wondering why I should back up data from Office 365 when it's a cloud service. Microsoft assures you of high data availability, but the service itself has no built-in backup mechanisms. And that's something to keep in mind.

Office 365 has two levels of recycle bins in it. The first level is user level, and data from this recycle bin can be restored directly by the user. The second level is admin and only an administrator can restore data from this level. You can have litigation hold and in-place hold set up, but that is not available in all plans, and you probably won't activate it on all mailboxes, SharePoint sites and teams in Teams.

📺 Learn more how to backup Office 365 data in my today's video 👇 👇
https://youtu.be/BBEjAKeaRCQ

#videotutorial #cswrld #backup #office365

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝘀𝗽𝗲𝗰𝗶𝗳𝗶𝗰 𝗳𝗶𝗹𝗲 𝘁𝘆𝗽𝗲𝘀 𝗶𝗻 𝗲𝗺𝗮𝗶𝗹 𝗮𝘁𝘁𝗮𝗰𝗵𝗺𝗲𝗻𝘁𝘀

A very common source of infection is email. Everyone uses email and threat actors take advantage of it. Either in the form of phishing or in the form of malicious attachments.

There are very advanced protection options within Office 365. Whether it be within Exchange Online Protection, which is included in all Office 365 / Exchange Online plans, or within Safe Attachments, which is an extension within Microsoft Defender for Office 365.

But a very effective protection is the very simple blocking of unwanted file types within email attachments. You simply block what is unwanted, making it very easy and effective to block many potentially malicious files.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/dFlD_CH5Kp8

#cswrld #videotutorial #email #attachments #filter #office365 #exchangeonline

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝘂𝗻𝗸𝗻𝗼𝘄𝗻 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗

Under conditional access policies, it is possible to block individual device platforms. In general, it is a good idea to eliminate all ways that a potential threat actor could use to compromise the environment. In other words, block everything that is not needed.

This also applies to device platforms within Microsoft Entra ID. For example, if your organization only uses Windows, iOS, and Android, it's a good idea to disable all other platforms. If you also use macOS, you need to add macOS as well, of course.

What I would definitely recommend blocking is Windows Phone and other unknown platforms. Unrecognized / unknown platforms are usually spoofed User Agents, which is mainly used by threat actors.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/vFhQgwXmqTo

#cswrld #videotutorial #entraid #conditionalaccess #platforms #blocking

𝗛𝗼𝘄 𝘁𝗼 𝗯𝗹𝗼𝗰𝗸 𝗻𝗲𝘄𝗹𝘆 𝗿𝗲𝗴𝗶𝘀𝘁𝗲𝗿𝗲𝗱 𝗱𝗼𝗺𝗮𝗶𝗻𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗳𝗼𝗿 𝗘𝗻𝗱𝗽𝗼𝗶𝗻𝘁

Newly registered domains can of course be legitimate. Every domain is new at some point. But usually there isn’t any content on new domains right away – the content is still being developed, and the launch of the site won’t happen for some time.

But newly registered domains are often a tool for phishing attacks. Such domains are usually used in phishing attacks immediately after registration and usually disappear again after a short time, for example because they are cancelled or blocked by the registrar.

Blocking access to newly registered domains is a relatively popular and effective way of eliminating phishing.

It is possible to block newly registered and parked domains within Microsoft Defender for Endpoint. Domains within the first 30 days of registration are considered newly registered.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/oYtDHK90P1M

#cswrld #videotutorial #mde #defender #phishing #newdomains

𝗛𝗼𝘄 𝘁𝗼 𝗿𝗲𝗾𝘂𝗶𝗿𝗲 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝘁 𝗱𝗲𝘃𝗶𝗰𝗲 𝗳𝗼𝗿 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗮𝗰𝗰𝗲𝘀𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗

Requiring a managed device to access Microsoft 365 services (or generally any apps/services integrated with Microsoft Entra ID) is a very effective method of phishing protection.

This is because in such a case it is not enough for a threat actor to obtain, for example, login credentials through phishing. It is not even enough to somehow obtain or bypass MFA. In such a case, the threat actor would also have to have a managed device from the organization’s tenant. Which should be unrealistic to obtain.

Thus, requiring access from a managed device is a very effective and powerful method of protecting corporate identity. And yet it shouldn’t be too complicated to deploy, since corporate devices should be managed anyway.

📺 Watch my YouTube video on how to require compliant devices via conditional access policies in Microsoft Entra ID 👇 👇
https://youtu.be/mH-8x29xdW0

#cswrld #videotutorial #entraid #devicecompliance #applications

𝐒𝐡𝐨𝐮𝐥𝐝 𝐈 𝐭𝐫𝐮𝐬𝐭 𝐞𝐱𝐭𝐞𝐫𝐧𝐚𝐥 𝐌𝐅𝐀 𝐨𝐫 𝐧𝐨𝐭 𝐈𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐈𝐃?

Trust or do not trust external MFA in Microsoft Entra ID? There are different opinions, and I will talk about the pros and cons in this video.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/xjmUay482Mk

#cswrld #videotutorial #mfa #externaltrust #entraid

𝐇𝐨𝐰 𝐭𝐨 𝐭𝐮𝐫𝐧 𝐨𝐧 𝐢𝐧𝐛𝐨𝐮𝐧𝐝 𝐒𝐌𝐓𝐏 𝐃𝐀𝐍𝐄 𝐢𝐧 𝐎𝐟𝐟𝐢𝐜𝐞 365

Inbound SMTP DANE (DNS-Based Authentication of Named Entities) is a security protocol designed to secure email communication by ensuring the authenticity of the receiving mail server's encryption certificates when emails are delivered via the Simple Mail Transfer Protocol (SMTP).

By default, SMTP doesn't guarantee encryption, which makes it vulnerable to man-in-the-middle attacks. To secure email communication, SMTP can use STARTTLS, which upgrades a plain text connection to an encrypted one. However, STARTTLS by itself doesn't verify the authenticity of the receiving mail server's certificate, leaving it vulnerable to attacks where a malicious entity might impersonate the server.

DANE addresses this issue by enabling domain owners to publish their mail server’s encryption certificates in DNS records, which are protected by DNSSEC (Domain Name System Security Extensions). This allows sending mail servers to verify the authenticity of the receiving mail server's certificate before establishing an encrypted connection.

When an email is received, the receiving mail server uses DANE to publish its certificate in the DNS, allowing the sending server to check the certificate's validity before establishing a secure TLS connection. This ensures that emails are delivered over an encrypted connection and that the encryption certificate is trustworthy and has not been tampered with.

📺 Watch my YouTube video bellow on how to run on inbound SMTP DANE in Office 365 👇 👇
https://youtu.be/UEAlyU3CTHk

#cswrld #videotutorial #smtp #inbound #dane #office365

SharePoint sites are used to share data within an organization. Typically, this data is shared within teams or projects.

If it’s data that multiple people work with on a regular basis, then it’s ideal to automatically connect these SharePoint sites to all users who work with the data so that they don’t have to find the SharePoint site themselves and manually set it to sync to their computer.

Automatic synchronization can be easily set up using Microsoft Intune.

📺 Watch my YouTube video bellow on how to automatically map SharePoint sites via Microsoft Intune 👇 👇
https://youtu.be/gAjn6_hb80Y

#cswrld #videotutorial #intune #sharepoint #sitemapping

𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫 𝐟𝐨𝐫 𝐄𝐧𝐝𝐩𝐨𝐢𝐧𝐭 𝐓𝐚𝐦𝐩𝐞𝐫 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐞𝐱𝐩𝐥𝐚𝐢𝐧𝐞𝐝

Tamper Protection in Microsoft Defender for Endpoint is protection that protects selected settings, such as virus and malware protection. With tamper protection, you cannot disable selected components of Microsoft Defender for Endpoint or change their settings.

In fact, disabling or changing settings on a security product is usually what a threat actor is trying to do. If they were able to deactivate the protection, it would make their subsequent work much easier. This is why it is extremely important to keep tamper protection active.

📺 Watch my YouTube video bellow on Microsoft Defender for Endpoint protection 👇 👇
https://youtu.be/xnC6Ufl025I

#cswrld #mde #videotutorial #defender #tamperprotection

𝐓𝐀𝐌𝐏𝐄𝐑 𝐏𝐑𝐎𝐓𝐄𝐂𝐓𝐈𝐎𝐍 𝐅𝐎𝐑 𝐄𝐗𝐂𝐋𝐔𝐒𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓

Antivirus exclusions can do a lot of damage because what is in the exclusions is not monitored and possibly blocked. Exclusions should only be put in with great circumspection and there should be as few exclusions as possible.

Threat actors may try to create their own exclusions within various malware to allow them to run other malware and thus extend their control over the device. Therefore, exclusions need to be carefully protected and fully controlled.

📺 Watch my YouTube video bellow on how to enable tamper protection for exclusions in Microsoft Defender for Endpoint 👇 👇
https://youtu.be/8OjuGuGAXiY

#cswrld #mde #tamperprotection #exclusions #videotutorial

𝐓𝐀𝐌𝐏𝐄𝐑 𝐏𝐑𝐎𝐓𝐄𝐂𝐓𝐈𝐎𝐍 𝐅𝐎𝐑 𝐄𝐗𝐂𝐋𝐔𝐒𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓

Antivirus exclusions can do a lot of damage because what is in the exclusions is not monitored and possibly blocked. Exclusions should only be put in with great circumspection and there should be as few exclusions as possible.

Threat actors may try to create their own exclusions within various malware to allow them to run other malware and thus extend their control over the device. Therefore, exclusions need to be carefully protected and fully controlled.

📺 Watch my YouTube video bellow on how to enable tamper protection for exclusions in Microsoft Defender for Endpoint 👇 👇
https://youtu.be/8OjuGuGAXiY

#cswrld #mde #tamperprotection #exclusions #videotutorial

𝐓𝐀𝐌𝐏𝐄𝐑 𝐏𝐑𝐎𝐓𝐄𝐂𝐓𝐈𝐎𝐍 𝐅𝐎𝐑 𝐄𝐗𝐂𝐋𝐔𝐒𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓

Antivirus exclusions can do a lot of damage because what is in the exclusions is not monitored and possibly blocked. Exclusions should only be put in with great circumspection and there should be as few exclusions as possible.

Threat actors may try to create their own exclusions within various malware to allow them to run other malware and thus extend their control over the device. Therefore, exclusions need to be carefully protected and fully controlled.

📺 Watch my YouTube video bellow on how to enable tamper protection for exclusions in Microsoft Defender for Endpoint 👇 👇
https://youtu.be/8OjuGuGAXiY

#cswrld #mde #tamperprotection #exclusions #videotutorial

𝐓𝐀𝐌𝐏𝐄𝐑 𝐏𝐑𝐎𝐓𝐄𝐂𝐓𝐈𝐎𝐍 𝐅𝐎𝐑 𝐄𝐗𝐂𝐋𝐔𝐒𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓

Antivirus exclusions can do a lot of damage because what is in the exclusions is not monitored and possibly blocked. Exclusions should only be put in with great circumspection and there should be as few exclusions as possible.

Threat actors may try to create their own exclusions within various malware to allow them to run other malware and thus extend their control over the device. Therefore, exclusions need to be carefully protected and fully controlled.

📺 Watch my YouTube video bellow on how to enable tamper protection for exclusions in Microsoft Defender for Endpoint 👇 👇
https://youtu.be/8OjuGuGAXiY

#cswrld #mde #tamperprotection #exclusions #videotutorial

𝐇𝐎𝐖 𝐓𝐎 𝐀𝐋𝐋𝐎𝐖 𝐏𝐈𝐍 𝐑𝐄𝐒𝐄𝐓 𝐅𝐎𝐑 𝐖𝐈𝐍𝐃𝐎𝐖𝐒 𝐇𝐄𝐋𝐋𝐎 𝐅𝐎𝐑 𝐁𝐔𝐒𝐈𝐍𝐄𝐒𝐒

PIN is one of the login options in Windows Hello for Business. If a user forgets their PIN, they can reset it. Windows Hello for Business allows two types of PIN reset:
- Destructive PIN reset, which deletes everything in the Windows Hello for Business container. This is a forced reset, but it requires no additional configuration and works by default.
- Non-destructive PIN reset, which requires additional configuration but does not delete the existing Windows Hello for Business container and the keys stored in it.

📺 Watch my YouTube video bellow on how to configure it 👇 👇
https://youtu.be/XdHrajCf-Tk

#cswrld #videotutorial #pinreset #windowshello #whfb

𝐇𝐎𝐖 𝐂𝐎𝐍𝐅𝐈𝐆𝐔𝐑𝐄 𝐆𝐑𝐀𝐃𝐔𝐀𝐋 𝐑𝐎𝐋𝐋𝐎𝐔𝐓 𝐏𝐑𝐎𝐂𝐄𝐒𝐒 𝐅𝐎𝐑 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓

Microsoft Defender for Endpoint supports gradual rollout of all update types – Security Intelligence Updates, Engine Updates, and also Platform Updates.

📺 Watch my YouTube video on how to configure gradual rollout process for the updates 👇 👇
https://youtu.be/DJ6k7BucK7Q

#cswrld #videotutorial #mde #defender #rollout #updates #microsoft

Microsoft announced via the Message Center message ID MC810406 that support is ending for User Enrollment with Company Portal for iOS devices in September 2024.

The reason for this change is that in iOS 18 Apple is no longer supporting profile-based user enrollment, which effectively means the end of support just for user enrollment through the Company Portal app. And given that most of the commonly used iOS/iPadOS devices get the update to iOS 18, it probably doesn't make sense to continue support for user enrollment through the Company Portal app.

📺 Watch my YouTube video bellow for details 👇 👇
https://youtu.be/7uBCGNrU2oA

#cswrld #videotutorial #intune #enrollment #accountdriven #ios #ipados

𝐒𝐌𝐀𝐑𝐓 𝐋𝐎𝐂𝐊𝐎𝐔𝐓𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃

Smart Lockouts in Microsoft Entra ID help protect Microsoft Entra ID accounts from password attacks. And smart lockouts are also called smart lockouts because they are smart in the meaning of that they should not negatively impact regular users.

📺 Do you want to learn more about Smart Lockouts in Microsoft Entra ID? Watch my YouTube video bellow 👇 👇
https://youtu.be/7V7BJcqb5CM

#cswrld #smartlockouts #entraid #cybersecurity #videotutorial

The unstoppable xfixium has already released the next few parts of his great #video #tutorial on how to program a #SEGA #MasterSystem #videogame using the C language 😲

The tutorial recreates the Ms. Pac-Man arcade classic from scratch - parts 11 to 13 are now available! 😍

Here's the whole series: https://www.youtube.com/watch?v=9jGkoHX3BSk&list=PLBYs5vZbDPv6UPqtU_deDSihZjeoCkUsS&index=1

#retrocomputing #retro #videogames #gamedev #C #pacman #mspacman #devkitSMS #videotutorial #retrodevelopment #8bit

𝐃𝐈𝐅𝐅𝐄𝐑𝐄𝐍𝐂𝐄 𝐁𝐄𝐓𝐖𝐄𝐄𝐍 𝐄𝐍𝐓𝐄𝐑𝐏𝐑𝐈𝐒𝐄 𝐀𝐏𝐏𝐒 𝐀𝐍𝐃 𝐀𝐏𝐏 𝐑𝐄𝐆𝐈𝐒𝐓𝐑𝐀𝐓𝐈𝐎𝐍𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃

In Microsoft Entra ID, there are Enterprise Apps and App Registrations. Many administrators don’t know the difference between the two and confuse the two important concepts. But there is a major difference between them, and it is good to know it.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/4ljbruQOOiI

#cswrld #videotutorial #entraid #enterpriseapps #appregistrations

𝐇𝐎𝐖 𝐓𝐎 𝐃𝐄𝐏𝐋𝐎𝐘 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐃𝐄𝐅𝐄𝐍𝐃𝐄𝐑 𝐅𝐎𝐑 𝐄𝐍𝐃𝐏𝐎𝐈𝐍𝐓 𝐎𝐍 𝐈𝐎𝐒 𝐕𝐈𝐀 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐈𝐍𝐓𝐔𝐍𝐄

Unlike Android, Microsoft Defender for Endpoint can be installed and configured on Apple iOS in a completely zero-touch mode for the end user via Microsoft Intune. The end user does not need to confirm any settings, permissions or anything else on their iOS/iPadOS device afterwards.

📺 Watch my YouTube video bellow for more details 👇 👇
https://youtu.be/QHJCDr49RhY

#cswrld #intune #videotutorial #mde #defender #ios

𝐇𝐎𝐖 𝐓𝐎 𝐔𝐒𝐄 𝐓𝐄𝐌𝐏𝐎𝐑𝐀𝐑𝐘 𝐀𝐂𝐂𝐄𝐒𝐒 𝐏𝐀𝐒𝐒 𝐈𝐍 𝐌𝐈𝐂𝐑𝐎𝐒𝐎𝐅𝐓 𝐄𝐍𝐓𝐑𝐀 𝐈𝐃

When an organization uses passwordless authentication, they need to figure out how to onboard users. In other words, you need to solve the chicken/egg problem. If a user has not registered any passwordless authentication method, how can they authenticate to register a passwordless authentication method?

Temporary Access Pass (TAP) solves this problem.

📺 Watch my YouTube video bellow on how to use Temporary Access Pass in Microsoft Entra ID 👇 👇
https://youtu.be/AqqvMqNcXRU

#cswrld #entraid #temporaryaccesspass #authentication #tap #videotutorial

Geospatial Python 🐍 - Full Course for Beginners with GeoPandas 🐼
--
https://youtu.be/0mWgVVH_dos?si=KHenBnxdeStppvnH <-- shared video tutorial
--
https://moderngis.xyz/courses/geopandas-free-certification/ <-- shared course files
--
[sharing of this course should not – necessarily - be considered as an endorsement]
#GIS #spatial #mapping #tutorial #onlinelearning #free #training #python #geopandas #pandas #beginners #video #videotutorial #workflows #automation #spatialanalysis #spatialdata #DuckDB #leafmap #lonboard #certification

RECOMMENDED CONDITIONAL ACCESS POLICIES IN MICROSOFT ENTRA ID

Conditional access policies in Microsoft Entra ID allow for very granular security management. The problem is that organizations usually do not have conditional access policies properly defined. There tend to be blind spots, policies don’t cover all applications, all users, and all scenarios.

Many organizations have conditional access policies defined but do not think about them properly. This is because they often target only specific applications or specific users. And when I ask them why the MFA policy only targets Office 365 for example, they tell me they don’t use anything else. Or when I ask why they only target one group of users, they tell me that other users don’t use cloud services.

But that’s just the wrong approach. You are not primarily protecting the services from your users, but from attackers. And just because you don’t use anything other than Office 365 doesn’t mean an attacker will not use it. Or just because some users don’t use cloud services doesn’t mean those accounts can’t be exploited by an attacker. If those apps or accounts exist in the cloud, they need to be protected whether regular users use them or not. Attackers are looking for the most insecure places, the weakest links.

📺 Watch my YouTube video bellow where I talk about the conditional access policies that I recommend implementing 👇 👇
https://youtu.be/LtIgFBDJzXs

#cswrld #videotutorial #entraid #conditionalaccess #recommendation

Unlike theoretical courses, you can literally create a finished product from watching each video tutorial with curlytea's project-based learning!

#howto #DIY #haircare #skincare #learning #DIYvideos #beauty #curlyhair #haircaretips #curlyhairtips #curlygirl #learning #education #tutorials #videotutorial

Authentication Strengths in Microsoft Entra ID allows you to granularly define authentication requirements for different situations.

Before authentication strengths were available, authentication requirements were defined globally for the entire tenant, and then conditional access policies could just say that multi-factor authentication was required, for example. But it was not possible to define what type of multifactor authentication was required. So anything that was available globally could be used by all users in all situations.

Which was not optimal. There are situations where a less secure authentication method like SMS or TOTP might be enough. But there are situations where we only want to use very secure authentication methods like FIDO2 when someone is logging into a global admin account for example.

Such granularity was not possible before. If SMS authentication was enabled for a given tenant, even the global admin could use SMS for authentication.

📺 𝐖𝐚𝐭𝐜𝐡 𝐭𝐡𝐞 𝐫𝐞𝐜𝐨𝐫𝐝𝐢𝐧𝐠 𝐨𝐧 𝐦𝐲 𝐏𝐚𝐭𝐫𝐞𝐨𝐧 https://www.patreon.com/posts/microsoft-entra-105282804?utm_medium=clipboard_copy&utm_source=copyLink&utm_campaign=postshare_creator&utm_content=join_link

The recording is also available in Czech language on
𝐅𝐨𝐫𝐞𝐧𝐝𝐨𝐫𝐬 https://www.forendors.cz/p/646afdb06ee2fa16eeabe6c7c27a8627
𝐇𝐞𝐫𝐨𝐡𝐞𝐫𝐨
https://herohero.co/cswrld/post/bceroxowdykkdqmwkexieitgvtiobpq

👍Share, like, comment!

#entraid #authentication #authenticationstrengths #conditionalaccess #cybersecurity #recommendations #tips #videotutorial