01↗
Cybersecurity
Active Directory assessments and hardening, identity protection, Microsoft Defender, segmentation and practical remediation plans.
Guides for this serviceTLS certificates: detect expiry before an outage →Microsoft Purview DLP: start with useful policies without blocking work →Microsoft Defender: investigate an alert without unnecessary device isolation →Microsoft Entra Token Protection: reduce stolen token replay →Microsoft 365: detect and remove suspicious email forwarding →Microsoft Defender: manage antivirus exclusions without weakening security →Slow file server: diagnose SMB, DNS, antivirus, and storage →Secure vendor remote access with MFA, Conditional Access, and Cisco →Employee offboarding: secure Microsoft 365 without losing data →Microsoft 365 email going to junk: how to find the cause →Compromised Microsoft 365 account: a first-response guide →Slow SQL Server: diagnose blocking, waits and expensive queries →Microsoft Secure Score: which recommendations should you fix first? →Microsoft 365 OAuth apps: audit consent and Microsoft Graph permissions →Before Copilot: audit SharePoint, Teams and OneDrive permissions →LDAP signing and channel binding: secure Active Directory without outages →SQL Server health assessment: T-SQL queries and PowerShell scripts →Azure Update Manager and the future of WSUS: transition with Azure Arc →Secure Active Directory service accounts: gMSA, SPNs and delegation →Conditional Access: move from report-only to enforced without locking out users →Restore Active Directory after a cyberattack: build a forest recovery plan →Protect Veeam from ransomware: hardened Linux repository and immutable backups →Azure Virtual Desktop vs Citrix: architecture, performance and costs →Secure Microsoft 365 admin workstations with Conditional Access and PIM →Microsoft Intune: replace Group Policy through a controlled migration →Secure a UniFi small-business network: VLANs, firewall, guests and IoT →Azure Arc for on-premises servers: inventory, patching and governance without migration →Configure DMARC with SPF and DKIM in Microsoft 365 without blocking legitimate mail →Replace AzureAD and MSOnline with Microsoft Graph PowerShell without breaking scripts →Microsoft Entra emergency access accounts: create, protect and monitor break-glass access →Deploy Windows LAPS in a hybrid Active Directory and Microsoft Entra ID environment →Microsoft 365 token theft: why MFA is not enough against AiTM attacks →Secure Active Directory Certificate Services: detect ESC1, ESC4, ESC6 and ESC8 →SMTP AUTH Basic retirement in Microsoft 365: migrate printers, apps and alerts to OAuth →Cloudflare Tunnel with Docker on Unraid: publish services without opening ports →Stale MDE devices: cleanup with PowerShell and the API →Migrate Microsoft Defender for Identity to v3.x sensors: a practical guide →Microsoft Defender Advanced Hunting: 10 useful KQL queries for IT administrators →Microsoft Defender ASR rules: moving from Audit to Block without disrupting production →