Entra.News #4: Your weekly dose of Microsoft Entra
Find out the latest on ID Protection detections, new token theft playbook, Power Platform vulnerability, and more...
👋 Hi, this is Merill with the fourth edition of entra.news, your weekly roundup of Microsoft Entra related news.
⚡️ Microsoft
✅ Generally Available
Integration of Microsoft Entra ID Protection with Microsoft 365 Defender • Alex Weinert
🔥 Public Preview
What’s new with Microsoft Entra ID Protection • Alex Weinert
New Microsoft Entra ID Protection dashboard
New advanced detections
Verified threat actor ID detection
Attacker in the middle detection
Real-time Azure AD threat intelligence
Guest governance - Monitor guest accounts at scale with inactive guest insights
📖 Read
Microsoft mitigates Power Platform Custom Code information disclosure vulnerability • MSRC
Token Theft Playbook • Thomas Detzner and team
Step-by-Step Guide : Azure AD PIM for Groups • Dishan Francis
Use user managed identity to replace connection string in"AzureWebJobsStorage" for function apps • Dennis Zheng
AiTM & BEC threat hunting with KQL • Kijo Girardi
From the community…
☀️ Learn
Unauthorized Access to Cross-Tenant Applications in Microsoft Power Platform • Tenable
Hook, Line, and Phishlet: Conquering AD FS with Evilginx • Daniel Underhay
Microsoft Entra Workload ID - Introduction and Delegated Permissions • Thomas Naunheim
Persistence via App Registration in Entra ID • Elli Shlomo
Microsoft Entra ID Honeypot Accounts with Microsoft Sentinel • Daniel Chronlund
Testing out the Entra ID inbound provisioning API • Marius Solbakken
Emulate Managed Identities during development • Stephan van Rooij
BYOD and MAM for Windows, protecting your data with Intune • Andrew Taylor
Require multifactor authentication for Microsoft admin portals (Preview) • Paul Winstanley
Deploy Tenant Restriction V2 • Tim Stock
Welcome Global Secure Access • Tim Stock
Find expiring client secrets using Graph API and PowerShell • Joey Verlinden
How to Setup Registration Campaigns for MFA in Microsoft Entra • Daniel Bradley
Issue employee verifiable credentials using Microsoft Entra Verified ID and ASP.NET Core • Damien Bowden
Azure AD Role Monitor detected an interesting new change to the Hybrid Identity Administrator role in Entra ID • Cody Burkard
⚒️ Toolkit
365AutomatedLab - PowerShell module to create a Microsoft 365 Test Environment using an Excel workbook • Clayton T.
Ping Castle - Score the risk of your Azure AD tenant • Vincent LE TOUX
📺 Watch
Incident Response Series: Chapter #4 Incident Response Books and Practices • Sofia Marin CyberSecurity
👨🏽💻 Merill’s corner
🎯 Tip for Microsoft 365, Microsoft Entra and infosec admins… [LinkedIn]
The Zero Trust Commandments [LinkedIn]
Token Theft Playbook Workflow [LinkedIn]
I like it ! Many thanks !