Thanks for this, it works great. I'm trying to do the same for Sensor
resource type
(https://graph.microsoft.com/beta/security/identities/sensors) with the
permission SecurityIdentitiesSensors.Read.All - but i'm getting an
"Expression.Error: Access to the resource is forbidden." - any idea on
why th...
Randy Smith's course gives insight to the detections MDI provides. Like
wel'll always see three 4624 logins when Kerberos ocurs host (service),
krbtgt, user. Along with 4768/4769, those 3 events make MDI analysis
more direct.
https://www.ultimatewindowssecurity.com/securitylog/training/
Excellent news !Do you know if Microsoft is going to release an API that
will make it easy to block a user and reset a password in a hybrid
context ? If we already have Defender for Identity, we can do it on the
XDR portal, but not by API... that would save us having to deploy Azure
Hybrid Worker.Th...
Latest Comments