85% of privileged credentials go unused for 90+ days.That’s not access – it’s an attack surface.Least-privilege isn’t just smart, it’s survival. Modern Windows platforms place a strong emphasis on privilege...
Category - Security
Anders Ahl
Microsoft BitLocker, Windows Hello for Business and Personal Data Encryption: Working Together to Protect User Data
Still using a BitLocker PIN? That’s approaching ancient history. Discover how Windows disk encryption, data encryption, and a passwordless strategy are redefining security – making access seamless and data...
Implementing Privileged Access Workstations (PAWs) – Benefits, Challenges, and Security Considerations
If you think cybersecurity is someone else’s job, think again! Privileged Access Workstations (PAWs) are your frontline defense against targeted attacks. This article reveals how PAWs create a secure, isolated...
Application Control on the Windows Platform – Architecture, Benefits, and Risks
Over the last couple of months, I’ve been writing articles on LinkedIn on various Deployment and Security related topics. While the reception there has been overwhelmingly positive, LinkedIn is a closed platform...
Fine-Tuning Azure Sentinel Log Ingestion for Intune Script Execution when using the Defender XDR Connector
Data collection rules allow you to filter Intune Management Extension (IME) events captured by Defender, ensuring only pertinent data is sent to Azure Sentinel. This approach helps manage ingestion costs while...
Ben Whitmore
Migrating to Authentication Methods Policies – Happy days!
1 authentication portal to rule them all
Maurice Daly
Jan Ketil Skanke
Michael Mardahl
2FA/MFA – Why multi-factor authentication is important
In this article we take a high level view of multi-factor authentication, the concepts and it's importance in todays corporate IT landscape.
Block the Office File Transfer Endpoints to help prevent data leakage on Managed Devices
In this post we will look at the Office File Transfer feature and implement a simple solution to prevent “one way” that users can leak corporate data. Table of Contents Mobile Devices – The Trojan...
The Windows Hello Zone! – Part 1
Enabling Windows Hello for Business… Why? Why Not? If it ain’t broken, don’t fix it?If the glove doesn’t fit, why debate it any further?We couldn’t possibly attract any malicious interest...
Exchange Online PowerShell with MFA enforced using Azure Automation
Secure unattended PowerShell against Exchange Online in Azure Automation using Certificate access.