Posts

Showing posts from January, 2017

Perspectives on the New Intune Console

Check out Brad Anderson's perspective on the new Intune console that is now part of the Azure admin portal. We're finally seeing the convergence of the various EMS offerings into one single glass of pane.

https://blogs.technet.microsoft.com/enterprisemobility/2017/01/24/perspectives-on-the-new-intune-console/

Also, watch Brad go over the changes and how to use them in this video from Channel 9's Endpoint Zone:

https://channel9.msdn.com/Series/Endpoint-Zone/The-Endpoint-Zone-with-Brad-Anderson-1701

Cyber Security Attackers Toolkit – What You Need to Know

For the security-interested, a more technical look at the tools attackers use during a cyber attack and how Advanced Threat Analytics plays a role in detecting these attacks and provides a higher level of visibility into them.

https://blogs.technet.microsoft.com/enterprisemobility/2017/01/24/cyber-security-attackers-toolkit-what-you-need-to-know/

Eliminating Plaintext Passwords With Microsoft Advanced Threat Analytics Using LDAP

Happy New Year to everyone!

To start off 2017 on an easy note, have a look at this article regarding the use of Microsoft Advanced Threat Analytics (ATA) to identify those applications and services that may still be sending passwords in plaintext in your network environment.  This is typically the result of simple LDAP binds being used for authentication purposes, which exposes your environment to attacks focused on privilege escalation.

https://blogs.technet.microsoft.com/enterprisemobility/2017/01/09/eliminating-plaintext-passwords-with-microsoft-advanced-threat-analytics-using-ldap/