Anything About IT

Learning, Building, Sharing

Collecting AzureAD User Authentication Method Information

Collect Azure AD user authentication methods using Microsoft Graph PowerShell for MFA and passwordless analysis.

Posted by Alex Verboon on Sunday, February 7, 2021

Generating Advanced hunting queries with PowerShell

Writing advanced hunting queries for Microsoft Defender ATP to search for execution of specific PowerShell commands.

Posted by Alex Verboon on Friday, July 10, 2020

User Spam & Phish Submissions configuration in Office 365 – Part 1

A new feature being rolled out in Office 365 to configure user submissions.

Posted by Alex Verboon on Sunday, January 19, 2020

PowerShell 7 – Group Policy Settings and Eventlogs

On December 16th Joey announced the PowerShell 7.0 release candidate. PowerShell 7 comes with Group Policy Settings and Eventlogs.

Posted by Alex Verboon on Monday, December 30, 2019

How to identify orphan Group Policy content within the Sysvol folder

Today I was working on a Microsoft Security Configuration baseline implementation and browsing through the Sysvol folder for orphan GPO content.

Posted by Alex Verboon on Tuesday, November 19, 2019

Microsoft Defender ATP Advanced Hunting – Who's logging on with local admin rights?

Use KQL Advanced Hunting in Microsoft Defender ATP to find out who is logging on with local administrator rights.

Posted by Alex Verboon on Tuesday, October 29, 2019