#100DaysOfCloud Archives

#100DaysOfCloud GetModern Channel Security

Bitesize update 1 – Endpoint Manager Settings Catalog

Dean EllerbyMarch 2, 2021March 2, 2021

In this Bitesize episode Andy gives a brief tour of the new Settings Catalog (Preview) feature in Endpoint Manager. https://www.youtube.com/watch?v=lI7cLVwWLuw Andy's blog:https://move2modern.weebly.comTwitter links:https://twitter.com/Getmodern_ukhttps://twitter.com/dean_ellerbyhttps://twitter.com/andy_69jones

#100DaysOfCloud Security

Check which users are still relying on legacy authentication protocols through Azure AD Sign-ins Workbooks

Dean EllerbyFebruary 13, 2021February 13, 2021

Day 12 #100DaysOfCloud In my last post I talked about how we can use the Insights and Reporting Workbook in Conditional Access to check how a set of CA policies...

#100DaysOfCloud Security

Transition to Modern Auth and Enforce MFA

Dean EllerbyFebruary 7, 2021February 7, 2021

Day 11 #100DaysOfCloud The benefit of Modern Auth Modern Auth and MFA are often the goal for organisations looking to secure their users' identities in the cloud. Modern Auth does...

#100DaysOfCloud Security

Exploring Microsoft Cloud App Security (MCAS)

Dean EllerbyJanuary 31, 2021February 1, 2021

Day 10 #100DaysOfCloud Microsoft Cloud App Security is a Cloud Access Security Broker. It discovers and provides visibility into users' app usage, identifies anomalous behaviour and controls access. In line...

#100DaysOfCloud Security

Azure Security Center continuous export to Azure Event Hubs

Dean EllerbyJanuary 24, 2021January 24, 2021

Day 9 #100DaysOfCloud Azure Security Center Azure Security Center is an infrastructure security management solution which provides organisations with tools to strengthen security and defend against threats in a native,...

#100DaysOfCloud Security

Creating an Azure Event Hub instance

Dean EllerbyJanuary 23, 2021January 23, 2021

Day 8 #100DaysOfCloud Azure Event Hubs is a real-time data service that can ingest millions of events per second from almost any data source. It's possible, for example, to send...

#100DaysOfCloud Security

Day 7 #100DaysOfCloud – Azure AD Password Protection and other best practices

Dean EllerbyJanuary 17, 2021January 17, 2021

Continued... In Part 1 I described the problem with traditional password security. In Part 2, I'll be uncovering the possible mitigations through tooling like Azure AD Password Protection, Multi-factor authentication,...

#100DaysOfCloud Security

Day 6 #100DaysOfCloud – Passwords; the problem

Dean EllerbyJanuary 16, 2021January 16, 2021

Usability vs Security Traditional password security is typically based on length, complexity and history. Organisations decide the minimum length for a password, the minimum number of distinct character types, and...

#100DaysOfCloud Windows 10

Day 5 #100DaysOfCloud – Endpoint Manager Security Baselines

Dean EllerbyJanuary 14, 2021January 14, 2021

In Day 4, I experimented with gaining meterpreter and shell access to a Windows client, and using a module to gather secrets in plaintext from wdigest. Today I'm going to...

#100DaysOfCloud Windows 10

Day 4 #100DaysOfCloud – Gathering secrets using KALI

Dean EllerbyJanuary 12, 2021January 12, 2021

I often find myself discussing endpoint security with customers and colleagues. The essential agreement is that Windows computers should be running the latest security update, and have the appropriate security...