Microsoft Graph-Berechtigungsreferenz - Microsoft Graph

Microsoft Graph macht differenzierte Berechtigungen verfügbar, die den Zugriff von Apps auf Ressourcen wie Benutzer, Gruppen und E-Mails steuern. Als Entwickler entscheiden Sie, welche Berechtigungen für Microsoft Graph Ihre App anfordert.

Configure audit policies for Windows event logs - Microsoft Defender for Identity

This article describes how to configure audit policies for Windows event logs as part of deploying a Microsoft Defender for Identity sensor.

Azure Threat Research Matrix

State of DevSecOps

For our 2025 report, we analyzed data from thousands of cloud environments to assess trends in application security posture and adoption of DevSecOps best practices.

Protecting Tier 0 the Modern Way

Almost every attack on Active Directory you hear about today – no matter if ransomware is involved or not – (ab)uses credential theft techniques as the key..

Investigating malicious OAuth applications using the Unified Audit Log

Abstract Supply chain attacks continue to evolve in sophistication with new TTPs emerging every few months. In this article we highlight some of the most..

Microsoft Incident Response lessons on preventing cloud identity compromise | Microsoft Security Blog

In real-world customer engagements, Microsoft Incident Response (Microsoft IR) sees combinations of issues and misconfigurations that could lead to attacker access to customers’ Microsoft Entra ID tenants. Effective protection of a customer’s Entra ID tenant is less challenging than protecting an Active Directory deployment but does require governance and monitoring. Reducing risk and exposure of your most privileged accounts plays a critical role in preventing or detecting attempts at tenant-wide compromise.

O365 Phishing infrastructure

Speedrun for a O365 Phishing infrastructure Microsoft offers some Developer Tenants for O365. Those tenants can be used to set up a fishing infrastructure within minutes, emails will make it to almost all inboxes, specially in O365 environments. And you get a nice Teams phishing infra as bonus