Anything About IT

Learning, Building, Sharing

Microsoft Defender for Endpoint - Security Settings Management Internals 0x1

A technical walkthrough of how Defender for Endpoint Security Settings Management works internally on Windows Server, including Entra device objects and dynamic group targeting.

Users can create AzureAD tenants

Review and monitor the Azure AD setting that allows users to create new tenants, with KQL detection queries.

Collecting AzureAD User Authentication Method Information

Collect Azure AD user authentication methods using Microsoft Graph PowerShell for MFA and passwordless analysis.

Windows 7 Hybrid Join and MFA ramblings

Today I ran into an issue where Windows 7 would not hybrid join as expected.