@bartvvugt

Cyber Security Advisor | Strategy | Architect | Owner @ BVV Consult | CISM | CCSK | ISO27k | CISO

 Belgium
bvv-consult.be
Joined January 2009
  • Tweets6.4K
  • Following1K
  • Followers500
4Media
I like the set of recommendations for Identity and Access Management. It includes an explanation on how the components fit together as well as a nice architecture overview of the various types of identities. learn.microsoft.com/en-us/az… #MSFT #Identity #EntraID

Architecture strategies for identity and access management - Microsoft Azure Well-Architected...

Learn about recommendations for authenticating and authorizing identities that are attempting to access workload resources.

learn.microsoft.com
1
16
94
11,612
bartvvugt retweeted
Dirk-jan
@_dirkjan10 Oct 2023
New blog: Phishing for Primary Refresh Tokens and Windows Hello keys. This blog describes how we can use device code phishing to obtain PRTs and in some cases even add backdoor Windows Hello keys 🤯 dirkjanm.io/phishing-for-mic…

Phishing for Primary Refresh Tokens and Windows Hello keys

In Microsoft Entra ID (formerly Azure AD, in this blog referred to as “Azure AD”), there are different types of OAuth tokens. The most powerful token is a Primary Refresh Token, which is linked to a...

dirkjanm.io
8
276
7
587
131,020
🚀 Excited to launch MDE-Troubleshooter! 🎉 github.com/ThomasVrhydn/MDE-… 🔎 Simplify Defender for Endpoint troubleshooting. 💻 PowerShell script + GUI. 🧩 Security config, ASR, logs, exclusions, performance analyzer & more. 🚀 Version 1, seeking your feedback. #DefenderForEndpoint
6
42
115
12,592
Ten DNS Server vulnerabilities could lead to Remote Code Execution and Information Disclosure on Domain Controllers with default configurations ift.tt/jGKuVxQ #DirTeam

Ten DNS Server vulnerabilities could lead to Remote Code Execution and Information Disclosure on...

When looking at the April 2023 Patch Tuesday today, I noticed ten updates that specifically address vulnerabilities in DNS Server. These vulnerabilities are specific to Domain Controllers running DNS...

dirteam.com
2
11
1,426
That deserves the saddest award in the world! Do it! Right now! With phishing resistant MFA via Windows Hello for Business and / or FIDO2 / or AAD CBA! aka.ms/MSDDR2022
1
2
601
🚨 #newblogpost - This time about how to restrict the automated onboarding of mde in defender for cloud without disabling the integration. Feedback welcome :) medium.com/@vertho/defender-…
1
6
562
The Attackers Guide to Azure AD Conditional Access – Daniel Chronlund Cloud Tech Blog danielchronlund.com/2022/01/…
1
57
1
166
15,298
bartvvugt retweeted
chompie
@chompie133713 Dec 2022
Demonstrating CVE-2022-37958 RCE Vuln. Reachable via any Windows application protocol that authenticates. Yes, that means RDP, SMB and many more. Please patch this one, it's serious! securityintelligence.com/pos…
68
989
57
3,489
Secure authentication method provisioning with Temporary Access Pass - #Security #Identity #Passwordless techcommunity.microsoft.com/…

Secure authentication method provisioning with Temporary Access Pass | Microsoft Community Hub

Temporary Access Pass is now in general availability!       

techcommunity.microsoft.com
2
Announcing Microsoft Defender Vulnerability Management in public preview - #Security #VulnerabilityManagement #Defender techcommunity.microsoft.com/…

Announcing Microsoft Defender Vulnerability Management in public preview | Microsoft Community Hub

Today, we are thrilled to announce the public preview of Microsoft Defender Vulnerability Management, a single solution offering the full set of Microsoft’s...

techcommunity.microsoft.com
Conditional Access without blocking legacy Auth.
1
14
1
90
bartvvugt retweeted
Samir@SBousseaden22 Apr 2022
sihost.exe as a spoofed parent process can be useful for redteam to evade ppid spoofing detection (high likely excluded as a noisy FP) + acts similar to explorer.exe & spawn diff types of childs, but ind same time if u see a child with integrity != medium its 90% suspicious :)
1
26
1
135
Updating best practices for Domain Controllers - techcommunity.microsoft.com/… #Identity
Forrester names Microsoft a Leader in 2022 Enterprise Detection and Response Wave™ report. Microsoft received one of the highest scores in the strategy category and strength of current offering category. #microsoft #MDE #Cybersecurity microsoft.com/security/blog/…

Forrester names Microsoft a Leader in 2022 Enterprise Detection and Response Wave™ report |...

Microsoft was named as a Leader in The Forrester Wave™: Enterprise Detection and Response for Q1 of 2022—the ninth Leader position for Microsoft Security in a Forrester Wave™.

microsoft.com
Ease the burden of managing and protecting endpoints with Microsoft advanced solutions microsoft.com/en-us/microsof…

Ease the burden of managing and protecting endpoints with Microsoft advanced solutions | AI at Work...

The changes from the past two years in working patterns and, consequently, enterprise IT architecture have created new customer needs, as well as more third-party solutions, for all “purse and...

microsoft.com
Cybersecurity is constantly being reshaped by continuous changes in business, technology, and the threat environment
2
11
Extend the reach of Azure AD Identity Protection into workload identities - techcommunity.microsoft.com/… #Microsoft #Security #azuread

Extend the reach of Azure AD Identity Protection into workload identities | Microsoft Community Hub

Shine a spotlight on workload identity compromise with Azure AD Identity Protection. Shine a spotlight on workload identity compromise with Azure AD Identity...

techcommunity.microsoft.com
Load more