🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

I publish two blog posts today! 📝🐫  The first dives into how we're improving the way BloodHound models attack paths through AD trusts: specterops.io/blog/2025/06/2…  The second covers an attack technique I came across while exploring AD trust abuse: specterops.io/blog/2025/06/2…

#maester on stage at TROOPERS Conference in the talk by Martin Haller on low visibility in RBAC. No support for RBAC in maester? Thomas Naunheim might change that... cc Merill Fernando

Face Off TROOPERS Conference Baptiste David & Tillmann Oßwald have fun with Windows Hello

Structured way to find conditional access bypasses from Fabian Bader and Dirk-jan ☝️

First talk of track 2 at TROOPERS Conference by Fabian Bader and Dirk-jan

One of the results of the joined research with Dirk-jan is entrascopes.com Basically the yellow pages for Microsoft first party apps. #TROOPERS25

This is so cool. Added to aka.ms/awesome-entra

It was great to attend #TROOPERS25! Beautiful city, nice weather, talented researchers. My talk was just based on how Entra works but I hope it contributed to the community. Thanks for everyone I had a chance to talk to! No jet lug now. Time to go home😂 github.com/temp43487580/E…

Since several people already asked: the slides from Fabian Bader and myself for TROOPERS Conference are available! "Finding Entra ID CA bypasses-the structured way". We talked about FOCI, BroCI, CA bypasses, scopes and getting tons of tokens. Check it at dirkjanm.io/talks/

Some #KQL-fu and entrascopes is usable in queries 🤓

My colleague Pascal did an outstanding job dismantling a info stealer that was found in the onboarding phase of a new customer. Read his deep dive to get a better understanding of how this multistage makes worked. glueckkanja.com/en/posts/2025-…

The latest on the Azure AD Graph retirement mentions two temporary outage tests and more guidance. If something stops working it might be because of those tests. #Entra #AADGraph techcommunity.microsoft.com/blog/microsoft…

We just sent out this week's Entra newsletter. Get the latest at entra.news/p/entra-news-1…

Tonight is Microsoft Security NL Meetup with the traditional summer BBQ. First session from Fabian Bader about threat detection with Microsoft Graph activity logs. Thanks yellow arrow for hosting this event.

👋 Bye bye Azure Portal, hello Unified Security Portal. Microsoft announced the deprecation of #Sentinel in the Ibiza portal. It's time to start planning techcommunity.microsoft.com/blog/microsoft…

Any Windows ETW + kernel expert here who can explain buffer pools and memory allocation to me ? :) I think I've found some awkward unintended behavior and want to validate whether I'm right :)