Entra.News #4: Your weekly dose of Microsoft Entra

Find out the latest on ID Protection detections, new token theft playbook, Power Platform vulnerability, and more...

👋 Hi, this is Merill with the fourth edition of entra.news, your weekly roundup of Microsoft Entra related news.

---

⚡️ Microsoft

✅ Generally Available

Integration of Microsoft Entra ID Protection with Microsoft 365 Defender • Alex Weinert

🔥 Public Preview

What’s new with Microsoft Entra ID Protection • Alex Weinert

• New Microsoft Entra ID Protection dashboard

• New advanced detections

  • Verified threat actor ID detection

  • Attacker in the middle detection

• Real-time Azure AD threat intelligence

Guest governance - Monitor guest accounts at scale with inactive guest insights

📖 Read

Microsoft mitigates Power Platform Custom Code information disclosure vulnerability • MSRC

Token Theft Playbook • Thomas Detzner and team

Step-by-Step Guide : Azure AD PIM for Groups • Dishan Francis

Use user managed identity to replace connection string in"AzureWebJobsStorage" for function apps • Dennis Zheng

AiTM & BEC threat hunting with KQL • Kijo Girardi

---

From the community…

☀️ Learn

Unauthorized Access to Cross-Tenant Applications in Microsoft Power Platform • Tenable

Hook, Line, and Phishlet: Conquering AD FS with Evilginx • Daniel Underhay

Microsoft Entra Workload ID - Introduction and Delegated Permissions • Thomas Naunheim

Persistence via App Registration in Entra ID • Elli Shlomo

Microsoft Entra ID Honeypot Accounts with Microsoft Sentinel • Daniel Chronlund

Testing out the Entra ID inbound provisioning API • Marius Solbakken

Emulate Managed Identities during development • Stephan van Rooij

BYOD and MAM for Windows, protecting your data with Intune • Andrew Taylor

Require multifactor authentication for Microsoft admin portals (Preview) • Paul Winstanley

Deploy Tenant Restriction V2 • Tim Stock

Welcome Global Secure Access • Tim Stock

Find expiring client secrets using Graph API and PowerShell • Joey Verlinden

How to Setup Registration Campaigns for MFA in Microsoft Entra • Daniel Bradley

Issue employee verifiable credentials using Microsoft Entra Verified ID and ASP.NET Core • Damien Bowden

Azure AD Role Monitor detected an interesting new change to the Hybrid Identity Administrator role in Entra ID • Cody Burkard

---

⚒️ Toolkit

365AutomatedLab - PowerShell module to create a Microsoft 365 Test Environment using an Excel workbook • Clayton T.

Ping Castle - Score the risk of your Azure AD tenant • Vincent LE TOUX

---

📺 Watch

Incident Response Series: Chapter #4 Incident Response Books and Practices • Sofia Marin CyberSecurity

---

👨🏽‍💻 Merill’s corner

🎯 Tip for Microsoft 365, Microsoft Entra and infosec admins… [LinkedIn]

The Zero Trust Commandments [LinkedIn]

I frequently see vendors and devs asking customers to lower their security posture for their apps to work… [LinkedIn]

Token Theft Playbook Workflow [LinkedIn]

---