Blog Posts
For years, Microsoft has offered built-in attack simulation training through Microsoft Defender for Office 365. However, I have rarely encountered anyone who is actively using the product. But why is that, you may wonder? There could be several reasons, but the most significant one is likely that the solution
Blog Posts
Today, I'm following up on a recent blog post where I talked about how to manage Conditional Access exclusions with PIM. For a similar purpose we are going to utilize the Access Reviews feature, which is part of the Identity Governance solution available in Microsoft Entra. Access Reviews
Blog Posts
Sometimes in our dreams we envision a world without exclusions for Conditional Access policies, only to wake up and realize that this is not yet a reality. Since exclusions can significantly expand the attack surface it's important to manage them effectively. So how can we deal with those
Blog Posts
Update: Microsoft recently brought the authentication context feature into general availability, but this came with an extra licensing requirement for protecting SharePoint sites and OneDrive; the new SharePoint advanced management license is required going forward. Read more about the license here. The Authentication Contexts feature has been in preview for
Blog Posts
Update: Microsoft has moved this feature from Public Preview to General Availability, I'll update this post (or write a new post) as soon as there are some new features or significant changes introduced. I vividly recall when this feature was first announced because I had the privilege to
Blog Posts
If you've read my earlier blog post, you know that Conditional Access can also enforce limited web-only access for unmanaged devices. However, if you don't want these restrictions to apply to all corporate data and instead want to protect specific locations with sensitive or business-
Blog Posts
Why do we need to deal with unmanaged devices, and what are my options? As we all know, times are changing, and employees are working in different ways than they did some years ago. Employees are only sometimes on the corporate network anymore; they work with data in the cloud,
Blog Posts
Microsoft Ignite is an annual event organized by Microsoft where they make exciting new technical announcements. As a Microsoft professional, I eagerly anticipate this event each year for its informative sessions, product demos, hands-on labs, and valuable networking opportunities. The last physical Microsoft Ignite event was held in Orlando