Home

My Recommended Azure AD Configuration

• Azure AD User
• Azure AD Guest User (B2B)
• Azure AD Groups
• Azure AD Enterprise Applications
• Azure AD Conditional Access Policies
• Entra ID Identity Protection
• Entra ID Password Spray
• Azure AD Multi Factor Authentication
• Azure AD Self Service Password Reset

Must Reads

• DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
• Detecting Abuse of Authentication Mechanism
• Advice for incident responders on recovery from systemic identity compromises
• Understanding "Solorigate"'s Identity IOCs - for Identity Vendors and their customers.
• Securing identity with Zero Trust
• Azure Active Directory security operations guide
• Azure Active Directory operations reference guide
• Office 365 Blog - EVERYTHING ABOUT MICROSOFT 365 SECURITY
• Security roadmap - Top priorities for the first 30 days, 90 days, and beyond
• Detect and Remediate Illicit Consent Grants
• Protecting Microsoft 365 from on-premises attacks
• Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs

Useful Articles

• Create a resilient access control management strategy with Azure Active Directory
• Remediation and Hardening Strategies for Microsoft 365 to Defend Against APT29 (v1.3)