CyberNerd @CyberNerd2014

Blue teamer, family guy, and nerd of all cyber things. Joined November 2016

Tweets

115
Followers

33
Following

201
Likes

29

CyberNerd @CyberNerd2014

2 days ago

Overlooking Gateway airport on State Route 24. Wall of dust is visible inbound. #AZWX

0 1 1 148 0

Download Image

CyberNerd @CyberNerd2014

2 weeks ago

Significant dust kicking up in Queen Creek. #azwx

0 0 0 157 0

Download Image

CyberNerd @CyberNerd2014

6 months ago

Significant hail in Queen Creek Mesa border. Signal Butte and Queen Creek Road. #azwx @NWSPhoenix

5 7 40 4K 1

Download Video

CyberNerd @CyberNerd2014

a year ago

Great view from Queen Creek! #azwx

2 0 7 332 0

Download Video

🌐 SQL injection vulnerabilities are still a major threat in commercial software, posing serious risks to data security and integrity. Software manufactures can protect users by implementing #SecurebyDesign principles.👉 go.dhs.gov/JbZ

12 39 79 12K 11

Download Image

Ru Campbell @rucam365

2 years ago

Entra ID Protection (previously Identity Protection) could have stopped many incidents I’ve worked before they even started. But there are gotchas and misconceptions that can catch you out. Check out my five of these, and share any others you’ve got! campbell.scot/entra-id-prote…

7 59 212 20K 181

Merill Fernando @merill

2 years ago

❓ Here's a quick quiz for you. Are you doing everything you can to protect your Microsoft 365 Privileged Accounts? Here are the top five that Microsoft recommends. What is your score?

8 44 199 21K 176

Download Gif

Merill Fernando @merill

3 years ago

Are you following best practice and setting up your Azure AD secondary/admin accounts without a mailbox? A neat hack is to use the new + mail format to set the Email address of the admin account to the user’s primary mailbox. This way all PIM & other alerts get to the user 1/4

18 120 535 0 263

Download Image

Kostas @Kostastsale

2 years ago

I updated the EDR telemetry project with corrected telemetry and new additions! See below the changes and upcoming EDRs: ✅ Corrected Trend Micro Telemetry ✅ Corrected ESET Telemetry 🌟 Added Qualys EDR 🎯New Additions Coming Up: 🔜 Sophos EDR 🔜 Cortex EDR Vendors are…

37 399 1K 159K 706

Download Image

Allan “Ransomware Sommelier🍷” Liska @uuallan

2 years ago

🧵Your periodic reminder ransomware attacks against healthcare providers have been EXCEPTIONALLY bad this year. Through the end of November 2023 there have been: 322 *publicly reported* ransomware attacks against healthcare providers. Compared to all of: 2022: 245 2021: 290

5 49 99 20K 16

Download Image

Microsoft Security @msftsecurity

2 years ago

According to data from the Microsoft Digital Defense Report 2023—out now—nearly nine in ten successful ransomware compromises originate through unmanaged security devices, which often have fewer security controls and defenses. Details at msft.it/60169aosy #CyberResilience

1 26 79 579K 43

Download Image

rootsecdev @rootsecdev

2 years ago

I had a chance to finally play around with this technique last week. Its very powerful and a very easy process to slip in an App registration and avoiding consent in the target tenant. Standard user accounts with no rights in Azure can do this. If you pair it with a compromised…

1 1 13 2K 6

Joanne C Klein 🇨🇦 @JoanneCKlein

2 years ago

My latest infographic describing a comprehensive strategy for sensitivity label coverage for files/emails and my 3 takeaway tips! #Purview #MPIP

0 10 32 4K 8

Download Image

it’s Chris Plummer @chrisplummer

2 years ago

If we agree “cyber nuclear” is a thing - and arguably NotPetya was such a thing - the reality is that anyone can possess such weapons. They can be executed by governments or by toddlers. Insurers did not fully appreciate this when they dove into this line of business.

0 1 0 182 0

Jeroen Niesen @jeroenniesen

2 years ago

🚀 Just dropped a new video on #MicrosoftSentinel automation! 🎥 Dive into the world of #LogicApps & automation rules to supercharge your security operations. Master the art of efficiency and stay ahead of threats. 🔒 Watch now: youtu.be/I1zNZEJ7mEg #cybersecurity

0 4 7 855 2

Matt Zorich @reprise_99

2 years ago

This is a query that I always find useful; using Defender for Cloud Apps, find when an inbox rule is created that uses only special characters for its name, such as '..' or '...'. This continues to be common behaviour for email-based attacks like BEC - github.com/reprise99/Sent…

2 29 131 13K 46

John Savill @NTFAQGuy

3 years ago

New video exploring connecting your HR system to your AD and Azure AD for a seamless user identity flow. youtu.be/WDXY_mF-Ads #azure #cloud #microsoft #cloudcomputing #microsoftazure #azurecloud #youtubevideo #learning #azureadministrator #azurearchitect #microsoftcloud…

1 9 54 8K 16

Merill Fernando @merill

3 years ago

Looking for a neat way to document your conditional access policies? Try idPowerToys.com I built this app as a quick, straightforward way to visualize conditional access policies and share it with others. Here's a quick demo 👇🏾