Dr Nestori Syynimaa
@drazuread.com
Principal Identity Security Researcher @Microsoft. Ex-Secureworks (PhD, MSc, MEng, CITP, CCSK).
And yes, opinions are my own ;)
And yes, opinions are my own ;)
Heading to Buenos Aires, wish me luck 😬
October 20, 2025 at 1:23 PM
Heading to Buenos Aires, wish me luck 😬
There's some room for sure!
October 13, 2025 at 12:11 PM
There's some room for sure!
Checking pre-vacation research notes..
August 1, 2025 at 11:17 AM
Checking pre-vacation research notes..
Updated to include RomHack:
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
romhack.io
www.blackhat.com/sector/2025/
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
romhack.io
www.blackhat.com/sector/2025/
July 4, 2025 at 12:21 PM
Updated to include RomHack:
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
romhack.io
www.blackhat.com/sector/2025/
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
romhack.io
www.blackhat.com/sector/2025/
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September!
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
www.blackhat.com/sector/2025/
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
www.blackhat.com/sector/2025/
July 4, 2025 at 6:53 AM
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September!
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
www.blackhat.com/sector/2025/
www.identitysummit.cloud
orangecon.nl
www.mcttp.de
www.brucon.org
www.blackhat.com/sector/2025/
Slides from my @wearetroopers.bsky.social talk are available at aadinternals.com/talks
June 27, 2025 at 11:29 AM
Slides from my @wearetroopers.bsky.social talk are available at aadinternals.com/talks
nOAuth revisited by @ericonidentity.com at @wearetroopers.bsky.social
June 25, 2025 at 2:06 PM
nOAuth revisited by @ericonidentity.com at @wearetroopers.bsky.social
And so it begins.. First @wearetroopers.bsky.social conference day! I've got some rare #AADInternals challenge coins with me and this one goes to first one who asks for it
June 25, 2025 at 7:02 AM
And so it begins.. First @wearetroopers.bsky.social conference day! I've got some rare #AADInternals challenge coins with me and this one goes to first one who asks for it
✅️ slide deck
✅️ demos
✅️ stickers
✅️ challenge coins
✅️ running shoes
All ready for the TROOPERS 2025
@wearetroopers.bsky.social
✅️ demos
✅️ stickers
✅️ challenge coins
✅️ running shoes
All ready for the TROOPERS 2025
@wearetroopers.bsky.social
June 23, 2025 at 10:57 AM
✅️ slide deck
✅️ demos
✅️ stickers
✅️ challenge coins
✅️ running shoes
All ready for the TROOPERS 2025
@wearetroopers.bsky.social
✅️ demos
✅️ stickers
✅️ challenge coins
✅️ running shoes
All ready for the TROOPERS 2025
@wearetroopers.bsky.social
Checked out the first gig of @durandurancom.bsky.social summer tour with wifey at Nokia Arena @tampere.fi 😎
June 3, 2025 at 7:43 PM
Checked out the first gig of @durandurancom.bsky.social summer tour with wifey at Nokia Arena @tampere.fi 😎
The compulsory studies of my doctoral programme at University of Jyväskylä are now completed! Next step: dissertation 📘
May 20, 2025 at 6:13 AM
The compulsory studies of my doctoral programme at University of Jyväskylä are now completed! Next step: dissertation 📘
Walking down the memory lane in Oxford 🇬🇧 with wifey. Ten years ago this day we became husband and wife ❤️
May 13, 2025 at 7:40 AM
Walking down the memory lane in Oxford 🇬🇧 with wifey. Ten years ago this day we became husband and wife ❤️
Ran this route in Oxford last time 10 years ago.
May 11, 2025 at 5:29 PM
Ran this route in Oxford last time 10 years ago.
One clear sign of getting old is when your Inspector Morse pub crawl ends after the second stop 🥱
May 10, 2025 at 8:41 PM
One clear sign of getting old is when your Inspector Morse pub crawl ends after the second stop 🥱
To get CAE tokens, use -CAE switch when getting access tokens. The resulting token has longer validity period (if supported by the service) and xml_cc claim.
April 18, 2025 at 12:10 PM
To get CAE tokens, use -CAE switch when getting access tokens. The resulting token has longer validity period (if supported by the service) and xml_cc claim.
Token Protection allows getting tokens with PRT and session key. As tokens are encrypted, they can't be stolen with AitM (sorry @mrgretzky.breakdev.org)
April 18, 2025 at 12:10 PM
Token Protection allows getting tokens with PRT and session key. As tokens are encrypted, they can't be stolen with AitM (sorry @mrgretzky.breakdev.org)
To use MSAL, just provide -UseMSAL switch when getting access token.
April 18, 2025 at 12:10 PM
To use MSAL, just provide -UseMSAL switch when getting access token.
After spending two weeks in Miami and Caribbean cruise with the best company ❤️, I'm back in business!
April 9, 2025 at 3:25 PM
After spending two weeks in Miami and Caribbean cruise with the best company ❤️, I'm back in business!
Finally, after 10 months and 25 days, I finished reading George R. R. Martin's "A Song of Ice and Fire" series just to learn that it's still missing a book (or two).
April 1, 2025 at 12:24 AM
Finally, after 10 months and 25 days, I finished reading George R. R. Martin's "A Song of Ice and Fire" series just to learn that it's still missing a book (or two).
It is not always easy to get presentations accepted to cyber security industry conferences. As a scholar, I can assure it's the same with academic conferences! This time two reviewers gave 1/6 and one 5/6 😁
March 19, 2025 at 7:43 AM
It is not always easy to get presentations accepted to cyber security industry conferences. As a scholar, I can assure it's the same with academic conferences! This time two reviewers gave 1/6 and one 5/6 😁
A bit boring morning run, but in new city!
March 13, 2025 at 9:28 AM
A bit boring morning run, but in new city!