Sign in

seick

@seick.it
93 followers 258 following 43 posts

Security Engineer | custos nubium #Security #Azure #EntraID #KQL #ConditionalAccess #ActiveDirectory #MDE and a little bit of #macOS

PostsRepliesMedia
seick @seick.it · 12/03/2026
media.tenor.com
a man wearing a tan suit and a red tie is sitting with his eyes closed
ALT: a man wearing a tan suit and a red tie is sitting with his eyes closed
000
seick @seick.it · 12/03/2026
And I do know the "workaround" but I would like to have it native...
100
seick @seick.it · 12/03/2026
Interesting, but what I really need is the ability to store passkeys on non-company mobile phones, even if the conditional access policy blocks ‘All Apps’ from these types of devices. Have you heard anything about this? There were rumours that it was coming...
100
Reposted by seick
Merill Fernando 💚 @merill.net · 10/01/2026
🚨 Global Secure Access ≠ “replace VPN and done.” I just published a new podcast with Chris Brum where we break down real-world Microsoft GSA deployments 🧵👇
152
seick @seick.it · 28/11/2025
Something for your read/ watch only friday. media.ccc.de/v/god2025-56...
media.ccc.de
Keynote: Code Dark Age
Generative AI is supposed to make our lives easier. But what if it's really just coding us straight into a new Dark Age? We hand over our...
000
Reposted by seick
Kevin Beaumont @doublepulsar.com · 01/10/2025
One the craziest elements about cybersecurity is you have half the industry sat worrying about cyberwar!1! and going on about quantum and AI, then you have you have the operational reality of what is actually happening on the ground - it bares no resemblance, at all, to what people are focused on.
824334
Reposted by seick
Jakob Schaefer @jakobschaefer.com · 18/09/2025
You can now define, with granularity, which of your Microsoft Teams users can receive messages from external senders. I waited for this feature for a long while and was a bit too enthusiastic when I heard about it :). Wrote up my thoughts about this here: www.thinformatics.com/blog/manage-...
thinformatics.com
Manage external Communications in Teams — thinformatics
Hey Teams Admins! once in a month, a colleague at thinformatics organizes a “What’s new” Session where all co-workers can and should share news round about M365, Entra and Azure. This is one tool we’...
011
seick @seick.it · 19/08/2025
m.youtube.com/watch?v=z6GJ...
m.youtube.com
DEFCON33 - Turning Microsoft's Login Page into our Phishing Infrastructure - Keanu Nys
YouTube video by RedByte
000
seick @seick.it · 06/08/2025
"you'll spend more time fighting your own company than actual hackers. devs hate you for slowing them down. management hates you for costing money. users hate you for making passwords hard. you're basically professional party pooper." there is my new job title... professional party pooper
000
seick @seick.it · 26/06/2025
doing god's work!
020
Reposted by seick
Christopher Brumm @cbrhh.bsky.social · 17/01/2025
Unfortunately, that was only a matter of time! This video combines two of the most dangerous tools at the moment associated with phishing - and it's surprisingly simple! www.youtube.com/watch?v=Dp1z... Do we have defense options? Read on 👇
youtube.com
TokenSmith Meets Evilginx: Token Theft Combined with Entra Conditional Access Bypass
YouTube video by SYNACK Time
1104
seick @seick.it · 15/01/2025
sorry to hear. I know how annoying this is.
010
seick @seick.it · 14/01/2025
All you need to know about the TokenSmith Compliant Device Bypass ->
020
seick @seick.it · 07/01/2025
Yeah, rats.. that's true..
100
seick @seick.it · 06/01/2025
The query at the end of this article is less noisy in our environment... thoughts? www.bi-sec.de/2024/12/28/m...
bi-sec.de
Microsoft 365 - Geräte-Compliance-Bypass - < bi-sec >
Angriffe auf Microsoft 365 über Gerätecompliance-Bypass sind ab jetzt der Standard. Intune-Portal sei dank, können Angreifer CA umgehen!
100
Reposted by seick
Wolf-Peter Fritzsche @woopie.bsky.social · 05/01/2025
Fun part is, he held a presentation about this already in August but nobody seemed interested… www.youtube.com/watch?v=JItn...
youtube.com
Bypassing Entra ID Conditional Access Like APT: A Deep Dive Into Device Authentication Mechanisms
YouTube video by Black Hat
251
seick @seick.it · 02/01/2025
media.tenor.com
a man sitting in a chair pointing at the camera with the words " this is it " below him
ALT: a man sitting in a chair pointing at the camera with the words " this is it " below him
130
seick @seick.it · 02/01/2025
This blogpost shows a detection query for TokenSmith: quzara.com/blog/bypass-...
quzara.com
Bypass Intune Conditional Access Using TokenSmith: Detection & Response
Discover how to detect & respond to a new exploit bypassing Microsoft Intune Conditional Access Policies using advanced queries in Microsoft Defender XDR.
110
seick @seick.it · 02/01/2025
Everybody who has something to do with Conditional Access should read about TokenSmith and think about what this could do in combination with EvilGinx2 and what this could mean for your environment. #entraid #conditionalaccess labs.jumpsec.com/tokensmith-b...
labs.jumpsec.com
TokenSmith - Bypassing Intune Compliant Device Conditional Access | JUMPSEC LABS
Conditional Access Policies (CAPs) are the core of Entra ID’s perimeter defense for the vast majority of Enterprise Microsoft 365 (M365) and Azure environments. The core ideas of conditional access ar...
261
seick @seick.it · 24/12/2024
Mostly to study security related topics. But the F1 is a good idea that I did not really have on my radar. thanks.
010
seick @seick.it · 23/12/2024
Fellow non-MSP #Entra security bubble! Without a dev tenant, I’m curious—how do you set up your personal Azure security test environments? What licenses do you use—Microsoft E5, Business Premium + EMS E5, or a mix? How many licenses for effective testing? Would love to hear your approach on this.
210
Reposted by seick
Imran Rashid @imranrashid.bsky.social · 19/12/2024
Announcing GitHub Copilot Free! We're excited to announce an all new free plan for GitHub Copilot, available for everyone today in VS Code. No trial. No subscription. No credit card required. Learn more at the link below 👇 aka.ms/copilot-free
aka.ms
Announcing a free GitHub Copilot for VS Code
Announcing a free plan for GitHub Copilot in Visual Studio Code.
061
seick @seick.it · 08/12/2024
Never had such a case but I would start here: objective-see.org/tools.html
objective-see.org
Objective-See: Tools
Free, open-source tools to protect your Mac
120
seick @seick.it · 03/12/2024
Same…
000
seick @seick.it · 02/12/2024
fortunately it is only very, very annoying. I did nothing in that tenant that was only in there. Still... a little not would have been helpful to plan better.
010
seick @seick.it · 02/12/2024
"Your Microsoft 365 E5 developer subscription is for development purposes only and can be revoked if you use it for purposes other than development."... yeah. sorry. Only want to learn your products and skill up. 🙄
110
seick @seick.it · 02/12/2024
The tenant was still working last week. Was testing something tgere.. At least a little heads-up and a tiny warning would have been nice. So out of nothing my whole test environment is gone and if I am correct at the moment there is no other way than paying a tenant with all licenses, correct?
110
seick @seick.it · 02/12/2024
Is there any other way we non MSP people can try things out in a test environment and keep our skills up to date without spending several hundred dollars on licenses? Really annoyed right now.
120
seick @seick.it · 02/12/2024
Great. My Azure developer tenant, which was working just fine a few weeks ago, apparently expired end of october. No mail, no warning, nothing. All licenses, roles gone. I often used this to test security-relevant features, as this was the easiest way for testing as enduser.
220
seick @seick.it · 28/11/2024
For the few people who maybe missed the list: github.com/0x90n/InfoSe...
github.com
GitHub - 0x90n/InfoSec-Black-Friday: All the deals for InfoSec related software/tools this Black Friday
All the deals for InfoSec related software/tools this Black Friday - 0x90n/InfoSec-Black-Friday
032
seick @seick.it · 26/11/2024
The recordings from KustoCon 2024 are now available on Youtube! www.youtube.com/playlist?lis... #kql
youtube.com
KustoCon 2024 - YouTube
030
seick @seick.it · 25/11/2024
It is on us to make this space useful. The community has always been faster than MSFT365Status and with all MS people coming over to bluesky I am confident that you already can recommend bluesky as a good addition. :)
030
seick @seick.it · 23/11/2024
have a look at starter packs github.com/stevendborre...
github.com
GitHub - stevendborrelli/bluesky-tech-starter-packs: A list of tech-related Bluesky starter packs
A list of tech-related Bluesky starter packs. Contribute to stevendborrelli/bluesky-tech-starter-packs development by creating an account on GitHub.
110
seick @seick.it · 23/11/2024
We do have WHfB in our company but you would be surprised by how many people switch back to password because "they just like it". Also. especially witch the "older", non tech people, there is some distrust in using biometric features with company devices.
210
seick @seick.it · 21/11/2024
Is this something you are looking for? cloudbrothers.info/en/passkey-p...
110
Reposted by seick
John Savill @savilltech.com · 19/11/2024
Ignite Book of News is up! news.microsoft.com/ignite-2024-...
news.microsoft.com
Microsoft Ignite 2024 Book of News
The Book of News is your guide to all key items being announced at Microsoft Ignite 2024.
1176
seick @seick.it · 17/11/2024
Here's a useful tool for Bluesky Type your account name in and it will show a list of the accounts followed by the people you follow.. bsky-follow-finder.theo.io
bsky-follow-finder.theo.io
Bluesky Network Analyzer
Find accounts that you don't follow (yet) but are followed by lots of accounts that you do follow.
000
seick @seick.it · 16/11/2024
media.tenor.com
a picture of a stuffed unicorn with the words it 's so fluffy
ALT: a picture of a stuffed unicorn with the words it 's so fluffy
000
seick @seick.it · 14/11/2024
Good point. Will have a deeper look into that as it looks very helpful to me.
010
seick @seick.it · 14/11/2024
hey, is there a way to change the handle at bluesky.ms. Added a custom domain. Also it looks like I am not showing up in the category security. Thanks :)
000
seick @seick.it · 14/11/2024
Today I learned about "bag_unpack" in #KQL which unpacks a single column of type dynamic. To me this looks so much easier than "extend" every property in a dynamic object. Is there a reason why this is not widely used. Am I missing something?
140
seick @seick.it · 13/11/2024
You are very close with your assumption. 😀 Thanks Jef, I will have a look into this, but I guess that was it as your query/ chart looks like what I need. Thanks a ton.
010
seick @seick.it · 13/11/2024
ah sorry, gosh... Forgot the essential part. Result is the same when running normal query but rendering the result as a chart looks different.
100
seick @seick.it · 13/11/2024
I did but it looks like the workbook is interpreting queries slightly different than log analytics?! For example. When I do a "| summarize count() by UserDisplayName, AuthenticationMethod", the workbook ignores the "AuthenticationMethod part. Is this known behaviour? Are there infos about it?
100
seick @seick.it · 12/11/2024
Hey, does anybody from the #microsoft bubble know if there is a way to buy godeploy labs as individual? Or is there another option to get similar labs?
000
Reposted by seick
Farran Smith Nehme 🇱🇧 @selfstyledsiren.bsky.social · 11/11/2024
Speaking of the utterly broken Twitter search (RIP), here are instructions for searching on Bluesky. It requires a little more from you, but once you know the prefixes, I've found the search works just fine. bsky.social/about/blog/0...
bsky.social
Tips and Tricks for Bluesky Search - Bluesky
Let’s dive into all the tips and tricks for advanced Bluesky search!
133965313110
seick @seick.it · 11/11/2024
BlueHat 2024 talks are now for everyone available on YouTube m.youtube.com/playlist?lis...
m.youtube.com
BlueHat 2024 - YouTube
BlueHat 2024 - Oct 29-30, 2024. Redmond, WA USA
121
seick @seick.it · 11/11/2024
arabic flatbread - looks like in English it is written with a k... en.wikipedia.org/wiki/Khubz
en.wikipedia.org
Khubz - Wikipedia
110
seick @seick.it · 11/11/2024
I love to get Chubz, dip it into oil and after that in Za'atar. Do not need a main course after that. :)
100
seick @seick.it · 10/11/2024
Want to improve your Bluesky experience? Have a look at this of all known tools available for the Bluesky platform: github.com/fishttp/awes...
github.com
GitHub - fishttp/awesome-bluesky: A list of all known tools available for the Bluesky platform
A list of all known tools available for the Bluesky platform - fishttp/awesome-bluesky
0102