New blog post live for my Sentinel Saturday series!
Read the blog 👉 marshsecurity.org/sentinel-sat...

In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.

#Blueteam #Microsoft #Sentinel
#MicrosoftSentinel #CyberSecurity #SOCAutomation

V1.1 now released!

- Support for tracking Purview changes
- Ability to track multiple repositories
- Ability to generate RSS feeds
- Corrected a bug causing API errors
- Improved speeds. 
- Pull correct data instead of "repo sync"
- Added a "Last Updated" footer

This week’s #SentinelSaturdays covers how to write leaner, faster, more efficient KQL queries with practical examples you can use today.

#microsoft #sentinel #cybersecurity #cyber #security #tips #guide

🔗 Read the full walkthrough here: marshsecurity.org/sentinel-ski...

🚀 Introducing... #Microsoft #Docs Tracker!

it can often be difficult to keep up-to-date with the constant changes of Microsoft #documentation. Track documentation updates across the entire #MicrosoftDocs #GitHub organization in one place, with ease!

🔗 Try it here: docstracker.marshsecurity.org

ClickFix is emerging as a crafty threat. My latest post cuts through the noise, showing how you can defend using Microsoft tools.

🛡️ Read it here: marshsecurity.org/protecting-a...

#CyberSecurity #ZeroTrust #MicrosoftSecurity #ClickFix #Defender #Sentinel #SecOps #InfoSec #ThreatProtection

#Microsoft have now added the ability to #restore #conditionalaccess #policies in Microsoft #Entra.
To do this, you will need to have the Conditional Access Administrator role activated.

Find our more in my latest #Blog post: marshsecurity.org/restoring-mi...

#mailbombing can be a very serious #cyberthreat - These can be used to hide more nefarious activity or be leveraged by attackers as part of a wider campaign.
Find out more, and how you can protect and detect these with #Microsoft tooling in my #blog: marshsecurity.org/protecting-a...
#cybersecurity

🚨 #infosec Pros: Are you really in control of what runs in your #Windows estate?

Learn how to assess what #software is in your estate, and what gotchas to watch out for on part one of your #app control journey!

Read the full post 👉 marshsecurity.org/application-...

#cyber #security #microsoft

🚨 #infosec Pros: Are you really in control of what runs in your #Windows estate?

Learn how to assess what #software is in your estate, and what gotchas to watch out for on part one of your #app control journey!

Read the full post 👉 marshsecurity.org/application-...

#cyber #security #microsoft

Inspired by the amazing resource of @devfender.bsky.social (github.com/jkerai1/Soft...), I created a #Github #Actions workflow allowing users to raise an issue using a form template. The action then extracts the certificate and commits it back to the #repo, updating the README file.
#cybersecurity

Having issues deploying #microsoft #edge extensions across multiple #configuration profiles.

We are trying to split the “silently install extensions” across 1 config per extension (easier management) but once one is applied, others say there is a conflict.

Does anyone know if this is possible?

In my latest #blog I explore the wonderful world of #docker and how to ensure a #securityfirst implementation.

#cyber #security #homelab #technology

Read more:
marshsecurity.org/securing-doc...

In my latest #blog I explore the wonderful world of #docker and how to ensure a #securityfirst implementation.

#cyber #security #homelab #technology

Read more:
marshsecurity.org/securing-doc...

After discovering that NetBIOS settings aren’t available in #intune #settings, I have created a #script to disable this and will have to look into a #compliance #policy to ensure that this is disabled across the estate.

I have shared my #netbios and #llmnr script here:

github.com/Marshyp/Secu...

After a chat in the #Microsoft #EMS server, I decided to build an automated app tester using WSB.
This solution obtains hashes and pushes the installer to VirusTotal for checking

Check it out here: github.com/marshyp/sote...

#secops #cybersecurity #devops #cyber #powershell

Exploring automating #docker backups to GitHub, retaining historical backups of containers, volumes and compose.yml files for #automation #devsecops #cyber #cybersecurity

Read my blog here: marshsecurity.org/backing-up-d...

Exploring how to bring #cybersecurity closer to home with DNS (Yes, it's always DNS) using NextDNS for an easy win.
Read more: marshsecurity.org/dns-protecti...
With thanks to @devfender.bsky.social for the push to blog!