Zero Trust Security Concepts and Microsoft 365

Zero Trust Security Concepts and Microsoft 365 1

88 records were lost or stolen every second in 2017, and that number is only likely to increase. The two most common settings for these breaches to take place are healthcare and banking as a distant second. As companies move to ensure their entire supply-chain is compliant to meet strict regulations, such as GDPR and…

Read More

Step-by-Step Guide to Deploy Microsoft Sentinel

Step-by-Step Guide to Deploy Microsoft Sentinel 2

Note to readers: this guide was created in 2019 and is being kept online as an example of the process. The product (now Microsoft Sentinel) has evolved over the years, and a well-built, best-practice deployment is not a “15 minute guide” level of effort. Please reach out to us if you’re interested in using Sentinel…

Read More

Step-by-Step Guide to Securing Windows Virtual Desktop in Azure with Conditional Access and MFA

Step-by-Step Guide to Securing Windows Virtual Desktop in Azure with Conditional Access and MFA 5

One of my biggest complaints about using Azure AD P1 to issue Azure MFA challenges on a traditional RDS deployment via RADIUS authentication is that it issues an MFA challenge on every login. That’s almost as frustrating as trying to understand Microsoft Licensing. Fortunately, securing Windows Virtual Desktop in Azure with Conditional Access and MFA…

Read More

Threat Hunting with Azure AD Premium Subscriptions

Threat Hunting with Azure AD Premium Subscriptions 6

Every cloud security workshop that I perform with a client to enable Microsoft’s Enterprise Mobility + Security (EM+S) suite typically yields an unpleasant surprise. I had the CFO of one company demand the immediate implementation of Roles Based Access Control (RBAC) after seeing the granularity of the audit capabilities of Cloud App Security. During my…

Read More

You’re on the Wrong Microsoft 365 License for your Business

You’re on the Wrong Microsoft 365 License for your Business 8

Well, you’re probably on the wrong Microsoft 365 business license. If you’re on one of the following plans, then skip this article: Microsoft 365 E5 Microsoft 365 E3 plus Microsoft 365 E5 Security (Previously called Identity Threat Protection) Microsoft 365 Business plus Azure AD P2 But if you’re like most organizations that we speak to,…

Read More

Top 10 Security Best Practices with Microsoft 365 in 2021

Top 10 Security Best Practices with Microsoft 365 in 2021 9

Welcome to my initial blog post for our Secure Modern Workplace series! At Infused Innovations, one of our core security philosophies is that human minds can no longer keep up with the pace of cyberattacks. We must leverage automation through artificial intelligence to respond to security threats. With that in mind, let’s look at some…

Read More