Devfender
@devfender.bsky.social
The dev who defends using defender | Cybersecurity Automation Architect | Microsoft MVP | Microsoft Security Advocate
https://www.linkedin.com/in/jay-kerai-cyber/ // https://github.com/jkerai1
https://www.linkedin.com/in/jay-kerai-cyber/ // https://github.com/jkerai1
Are you autopatch or outta patch?
November 14, 2025 at 6:28 PM
Are you autopatch or outta patch?
Its Friday my dudes
November 14, 2025 at 2:01 PM
Its Friday my dudes
the math ain't mathing...
Looks like some new applied skills are available and some have been retired. At least this time they are staying on my transcript wooo!
Looks like some new applied skills are available and some have been retired. At least this time they are staying on my transcript wooo!
November 11, 2025 at 1:07 PM
the math ain't mathing...
Looks like some new applied skills are available and some have been retired. At least this time they are staying on my transcript wooo!
Looks like some new applied skills are available and some have been retired. At least this time they are staying on my transcript wooo!
Inviting Guests in your tenant via Access Packages?
Ensure you have a flow to clear up these guests.
Ensure Billing is enabled for Identity Governance for Guests.
#Entra
Ensure you have a flow to clear up these guests.
Ensure Billing is enabled for Identity Governance for Guests.
#Entra
November 2, 2025 at 2:49 PM
Inviting Guests in your tenant via Access Packages?
Ensure you have a flow to clear up these guests.
Ensure Billing is enabled for Identity Governance for Guests.
#Entra
Ensure you have a flow to clear up these guests.
Ensure Billing is enabled for Identity Governance for Guests.
#Entra
If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory.
This is a cloud only Tenant!
This is a cloud only Tenant!
October 25, 2025 at 10:08 PM
If you try to assign an Enterprise application to a Group in #Entra while in Entra Free, you will see a bizarre error relating to Active Directory.
This is a cloud only Tenant!
This is a cloud only Tenant!
well thats an interesting phish
October 19, 2025 at 7:20 PM
well thats an interesting phish
Global Administrator's well known name is TenantAdmins if you ever see it in logs.
This annoyed me when I first started in SOC and took me a while to figure out.
This annoyed me when I first started in SOC and took me a while to figure out.
October 14, 2025 at 4:00 PM
Global Administrator's well known name is TenantAdmins if you ever see it in logs.
This annoyed me when I first started in SOC and took me a while to figure out.
This annoyed me when I first started in SOC and took me a while to figure out.
Wowzer hit 10k on LinkedIn
I'm an influencer now
Here's what I learnt about b2b sales.
I'm an influencer now
Here's what I learnt about b2b sales.
October 9, 2025 at 1:00 PM
Wowzer hit 10k on LinkedIn
I'm an influencer now
Here's what I learnt about b2b sales.
I'm an influencer now
Here's what I learnt about b2b sales.
Instructions unclear. Send help
October 7, 2025 at 9:59 AM
Instructions unclear. Send help
Foiled by own custom MDA policy!
October 6, 2025 at 3:06 PM
Foiled by own custom MDA policy!
September 14, 2025 at 2:28 PM
These fields look new to me in SignInLogs
September 12, 2025 at 4:21 PM
These fields look new to me in SignInLogs
September 8, 2025 at 10:40 AM
South Park Episode Malware. Large Obfuscated file! Looks like it tries to unpatch ETW
Hash:
73044E540BC4D6A40E5ACE3DF86956759D1B1ECD3E30C076340DD40A02AC21BF
9DFAB3F5C1DF5A4D62E9F3BBDE96EBA1846620A3B413C07D6FA3160C925A5DCD
Hash:
73044E540BC4D6A40E5ACE3DF86956759D1B1ECD3E30C076340DD40A02AC21BF
9DFAB3F5C1DF5A4D62E9F3BBDE96EBA1846620A3B413C07D6FA3160C925A5DCD
August 20, 2025 at 7:07 PM
South Park Episode Malware. Large Obfuscated file! Looks like it tries to unpatch ETW
Hash:
73044E540BC4D6A40E5ACE3DF86956759D1B1ECD3E30C076340DD40A02AC21BF
9DFAB3F5C1DF5A4D62E9F3BBDE96EBA1846620A3B413C07D6FA3160C925A5DCD
Hash:
73044E540BC4D6A40E5ACE3DF86956759D1B1ECD3E30C076340DD40A02AC21BF
9DFAB3F5C1DF5A4D62E9F3BBDE96EBA1846620A3B413C07D6FA3160C925A5DCD
I remember when people would complain that #MDO was bad but the reality was they added their own domain to TenantAllowBlockList in allow (which basically overrides all security)
Thankfully, Microsoft have changed this feature a while back
Thankfully, Microsoft have changed this feature a while back
August 20, 2025 at 10:36 AM
I remember when people would complain that #MDO was bad but the reality was they added their own domain to TenantAllowBlockList in allow (which basically overrides all security)
Thankfully, Microsoft have changed this feature a while back
Thankfully, Microsoft have changed this feature a while back
isTenantRestricted is new to me in SignInLogs...
August 15, 2025 at 4:39 PM
isTenantRestricted is new to me in SignInLogs...
Important Defender License Gotcha:
office365itpros.com/2025/08/11/m... Shared Mailboxes Must be licensed for MDO regardless of Plan 1 or 2.
office365itpros.com/2025/08/11/m... Shared Mailboxes Must be licensed for MDO regardless of Plan 1 or 2.
August 12, 2025 at 6:12 AM
Important Defender License Gotcha:
office365itpros.com/2025/08/11/m... Shared Mailboxes Must be licensed for MDO regardless of Plan 1 or 2.
office365itpros.com/2025/08/11/m... Shared Mailboxes Must be licensed for MDO regardless of Plan 1 or 2.
Unifi's WiFi blackout scheduler thing is awesome NGL, though at first it only stopped the broadcast then eventually full blackout
August 7, 2025 at 9:09 AM
Unifi's WiFi blackout scheduler thing is awesome NGL, though at first it only stopped the broadcast then eventually full blackout