Mitigate HiveNightmare with MEM
It’s been only three weeks since the PrintNightmare debacle, which introduced several zero-days into the world of Microsoft affecting all Windows Operating Systems. Since my
22/07/2021
Blog
Mitigate Printer Nightmare with MEM
Unless you have been living underneath a rock these last few days, you probably have heard of the ‘Printer Nightmare’ vulnerability. This is an unpatched
06/07/2021
“Group Tag”: One of Autopilot’s hidden gems
As most people reading this blog will undoubtfully know, Windows autopilot is the modern deployment method for corporate Windows 10 devices. It allows an enterprise to pre-register corporate owned Windows 10 devices (using their unique hardware hashes) and link these devices to their Azure AD tenant. Once the device is known to the tenant, it is considered a trusted device that can be staged (enrolled) using autopilot.
25/05/2021
The Collective is ISO 27001 certified
The Collective is ISO 27001 certified in the field of security information. This recognition confirms our hard work, passion for and expertise in data protection.
29/03/2021
Avoid the Microsoft Teams “Islands Mode” Trap Part 2
After some issues related to Guest Access Features in Microsoft Teams related to the Upgrade Mode configuration, I decided to update this article. The actual problem with Teams Guest Access Features is related to the fact that the Upgrade Mode at Organizational Level not only dictates what Upgrade Mode is configured by default for users, but this setting also dictates what features Teams Guests have in your tenant.
12/03/2021
Avoid the Microsoft Teams “Islands Mode” Trap Part 1
Many customers (both small as well as large Organizations) are complaining about not so obvious and very confusing behavior between Skype for Business and Microsoft Teams. Those Organizations are already using Skype for Business (mainly On-Premises for their Enterprise Voice solution) and have started trials or pilots for Microsoft Teams.
12/03/2021
Setting up a bidirectional sync between Sentinel and JIRA
Many organizations that work with Azure Sentinel find that the built-in ‘ticketing’ capabilities are rather lightweight. More often than not, they are already using an
03/03/2021
Thinking outside of the box: using Teams Display devices to create a virtual office.
Sometimes, answers are where you expect the the least. Using Teams Display devices, we’ve been able to boost morale and improve interactions between colleagues by creating a virtual ‘office’.
09/02/2021
Monitoring Service Principals with Watchlists in Azure Sentinel
In every Microsoft 365/Azure environment there are multiple Service Principals. Service Principals can be used for your own custom-built apps, to deploy Azure resources through
13/01/2021
5 things 2020 taught me in cybersecurity
In many regards, 2020 was a perilous year. In the wake of a global pandemic, the entire world had to change the way they live and work. This paradigm change not only presented a difficulty for people personally, also from an IT perspective – and more specifically cybersecurity – many new challenges arose from the shift to remote working.
12/01/2021
Using a Lighthouse Service Principal within Azure DevOps
Within our SOC, Cloud Control, we heavily rely on Azure Sentinel to monitor the environments of our customers. To easily manage multiple Azure Sentinel environments,
25/08/2020
Assigning MDATP tags through the machine name & logged on user with Logic Apps
Tags in Microsoft Defender ATP is an extremely powerful tool to identify certain high value machines, group devices into machine groups, or for reporting through
08/07/2020
