Senior Threat Intelligence Analyst at Microsoft | SANS CloudSecNext Summit Co-Chair
I’m excited to co-chair the SANS CloudSecNext Summit this year. Our Call for Presentations just opened, and we’re looking forward to hearing your talks October 2-3 in Denver, Colorado!
https://www.sans.org/cyber-security-training-events/cloudsecnext-summit-2025/
How has least privilege changed in 2025?
@baileybercik talks on RunAs Radio at https://runasradio.com/Shows/Show/966 about Entra Permissions Management and more to help you implement least privilege rules in your systems!
It was my pleasure to share the stage with @baileybercik at @sansinstitute where we were able to present on the importance of governance controls in the cloud & AI era.
Yesterday, @_michaelepping shared best practices for deploying Platform SSO with #macOS devices on the recently revived #425Show. He shared out how it works under the hood as well as practice deployment and troubleshooting guidance. Great resource for Mac admins: https://youtu.be/bL0SvGVe474?si=Wx3XU9fG6xmTGq98
Looking forward to presenting on governance best practices at SANS #CloudSecNextSummit with @JefTek on September 30th. We’ll be there in person, but the event is fully accessible online. Check out the agenda and register here: sans.org/u/1uDe
Attending @BlueTeamCon in Chicago next month? @mzbat and I are once again running a full conference long cybersecurity resume and interview mentoring clinic at the venue. This is an opportunity for people at all career stages to get free, in-person 1:1 mentorship with a cybersecurity hiring authority to get fresh perspective on their career challenges.
The clinic only functions through the support of attendee volunteers. If you are a IC or people manager hiring authority and would like to volunteer, please sign up here: https://forms.gle/NusuwwZyKrNhzxwq6
If you are attending Blue Team Con and would like a little 1:1 mentoring time to work on your resume, interview skills, or career journey, sign up here: https://forms.gle/taUxWHa7vBN4L6b1A
#CybersecurityCareers @BurbSecPrime #ChicagoJobs #Cybersecurity #blueteamcon2024
Earlier this year @baileybercik and I presented at SANS #Cloud #Security summit on what we've learned from the last 18 or so months of deploying #CIEM as part of that broader #CNAPP strategy. We focused mostly on #Microsoft #Entra Permissions Management. The talk is now posted, https://www.youtube.com/watch?v=q2pdf_8aorg. If you want to learn more about #CNAPP see this post, https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/announcing-new-cnapp-capabilities-in-defender-for-cloud/ba-p/3981941. We also recently released an operations guide which has been very helpful for customers. Give it a read. https://learn.microsoft.com/en-us/entra/architecture/permissions-manage-ops-guide-intro. #InfoSec #Azure #AWS #GCP
#MicrosoftIdentityPGChat is back, y’all! We’re switching it up for 2023 and will be talking about Entra Permissions Management with the EPM team on LinkedIn Events tomorrow at 9am PST. We’re looking forward to the discussion!
https://www.linkedin.com/events/comechatwithusaboutentrapermiss7019056557569048577/
Just got a copy of Michael Howard’s newest book! Kyle, @markmorow, and I were happy to help out where we could to make the book as good as it could be. Looking forward to reading the whole thing https://www.amazon.com/Designing-Developing-Solutions-Developer-Practices/dp/013790875X
That escalated quickly. Anyways, here is the Azure AD Security Operations Guide. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/security-operations-introduction. It also has links to Sentinel workbooks and Sigma rules.
@alexbchalmers @JefTek that's a good suggestion! We're still figuring things out since everything's so turbulent on Twitter, but we'll keep y'all posted on what we decide to do next with our spaces.
@tsudo @ajohnsocyber Thanks, Keith!
hello world
