@nerdpyle hey I can follow Ned again since birdsite sucks. Miss you at MS
Microsoft CSA in Security. Opinions are my own.
I focus on #MDI, #MDE, #M365D and Azure Arc
Graeme B
- 19 Followers
- 64 Following
- 48 Posts
@AndresFreundTec if you hadn't seen this, Satya posted about you. https://twitter.com/satyanadella/status/1774581166039015641?t=KjVk8VASXcF9UisuJjXGTQ&s=19
Merill Fernando 
Folks, quick walkthrough on the new MTO feature that landed. You can now set up relationships between your tenants and manage sync from a single place if access is granted by the member tenants.
Once set-up the benefits include:
🎯 In Microsoft Entra you will be able to differentiate in-organization (MTO) users vs out-of-organization (B2B/Guest) external users
🎯 Improved collaborative experience in the new Microsoft Teams client where switching is more seamless and faster! https://techcommunity.microsoft.com/t5/microsoft-teams-blog/microsoft-teams-advantages-of-the-new-architecture/ba-p/3775704
🎯 Improved people search experience across tenants and viewing the profile cards of users from other tenants.
https://learn.microsoft.com/en-us/microsoft-365/enterprise/multi-tenant-people-search?view=o365-worldwide
PS Your tenant needs to be enabled for Targeted Release to try out this preview. You can enable this in M365 admin center > Settings > Org Setting > Organization profile tab > Release preferences > Targeted release for everyone
See here for more info https://learn.microsoft.com/en-us/microsoft-365/admin/manage/release-options-in-office-365?view=o365-worldwide
stux⚡️This looks like a lot of fun! #trains
@markmorow Found this for your baseball game - https://www.immaculategrid.com/
@nathanmcnulty I'm contemplating an AzMon workbook to visualize password pulls from LAPS. Not sure how it'll work for AAD yet, but I assume in the aad logs somewhere. Thoughts?
Irving Popovetsky
@nathanmcnulty @fabian_bader Any chance you remember what it was/where it was?
Does anyone in #infosec remember that image of raw vs most scrubbed data? It was like Raw Event data, Sysmon, EDR, in that order? Something like that?
I wrote a thing on Azure AD Password Protection Reporting. Using Azure Monitor, Arc, and Workbooks. https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/reporting-on-azure-ad-password-protection/ba-p/3804035
Reporting on Azure AD Password Protection
Hi everyone! It's been a long time, but Graeme Bray here with you to talk about an Azure Monitor workbook you can deploy in your environment to help you report on your Azure AD Password Protection. You are running AAD Password Protection, right? If you have Azure AD P1 or P2 for your users, you're...