Tag

entra id

6 articles

  1. Blog Danny Vorst

    Entra Agent ID explained: who gets to create AI agents?

    Entra Agent ID gives AI agents their own identity. What blueprints and agent identities are, why the setting 'Users can create agent blueprints' matters, and when to leave it on or switch it off.

  2. Blog Danny Vorst

    AiTM Phishing Exposed (2/2): Stop session hijacking

    Stop AiTM session hijacking with FIDO2, CAE, and token protection. Microsoft 365 configuration guide with 2 Sentinel queries and 7-step incident response.

  3. Blog Danny Vorst

    AiTM Phishing Exposed (1/2): How session hijacking works

    AiTM phishing doesn't bypass MFA. It waits for MFA to succeed, then takes what comes next. This is how the attack works and why standard MFA provides no protection against it.

  4. Blog Danny Vorst

    Social Engineering Exposed (3/3): Defence that works

    MFA alone won't stop a helpdesk attack. Here's what actually does: the process changes, Entra ID settings, and monitoring that holds up under pressure.

  5. Blog Danny Vorst

    Social Engineering Exposed (2/3): The helpdesk attack

    Attackers don't break MFA. They call your helpdesk and get it reset. Here's what that looks like in Entra ID, and why most tenants aren't built to catch it.

  6. Blog Danny Vorst

    Shadow AI in Microsoft 365: find and block it with Purview

    Shadow AI leaks data without triggering a single alert. Use Entra Internet Access, Defender for Cloud Apps, and Microsoft Purview to find and block it in 4 steps.