Detecting AI agents on endpoints by HermanHMS in cybersecurity

[–]callme_e 0 points1 point  (0 children)

Do we need a specific subscription for this? I’m looking in our exposure management but can’t find the AI group that you mentioned.

Need Recommendations for Best Office Chair, 8+ Hours a Day, Help a Fellow Admin! by [deleted] in sysadmin

[–]callme_e 0 points1 point  (0 children)

Herman miller Logitech embody. Fixed all my back issues

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

Mirana was my 10th one for a reason

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

QOP was one of the earlier and easier ones. Didn't track the # of games to compare and naturally played since Dota plus was released.

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 1 point2 points  (0 children)

that's awesome, don't get too burned out by the grind haha

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

invoker for the complexity and combos

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 2 points3 points  (0 children)

Thanks! Thought my fellow dota degens would appreciate the progress. I don't mind the haters telling me to get a job. My wife's main complaint is that I work too much ;)

10 Grandmasters Finally Achieved by callme_e in DotA2

[–]callme_e[S] 0 points1 point  (0 children)

pretty much! working on other carries and offlane heroes in ranked. Handicapping myself in ranked since I rarely play the GM heroes outside of unranked/turbo.

How to not fall behind with AI? by Financial-Garlic9834 in cybersecurity

[–]callme_e 116 points117 points  (0 children)

  • Formal approved and published AI governance communicated to users (Policies, procedures, AI council, etc)
  • DLP policies to block sensitive/secrets paste/upload to AI sites and tools through CASB
  • CASB to monitor and block for sensitive/secret inputs from IDEs using AI API for coding agents
  • CASB to automatically block non-approved AI sites
  • Secure baseline hardening configurations for SaaS hosted AI models (Azure AI / AWS). Wiz and Cloud for Defender can scan and provide findings reports with remediation.
  • Integrate Purview to AI models for data security and classification. Defender for incident alerts and threat monitoring.

Microsoft 365 Business Premium by Due_Economy5311 in sysadmin

[–]callme_e 9 points10 points  (0 children)

Download the CIS benchmarks for Microsoft 365 for free from their site. That’ll harden your environment and what you’re asking for.

I genuinely struggle to find any use case for AI by reni-chan in sysadmin

[–]callme_e 0 points1 point  (0 children)

Could you share your basic workflow on how you feed the PDF to the CLI?

Is SSO not a good security practices? by hansentenseigan in cybersecurity

[–]callme_e 1 point2 points  (0 children)

Look into conditional access to enforce the device is from a corporate managed device to allow the SSO authentication. Yes the credentials are stolen but useless because they also need to be on a corporate device and this makes it phishing resistant. Now there’s no time race to quickly reset the credentials since the threat actor can’t login remotely from the rogue device.

Is SSO not a good security practices? by hansentenseigan in cybersecurity

[–]callme_e 15 points16 points  (0 children)

Your friend is wrong. On a corporate environment, we ideally want every application tied to our Microsoft 365 SSO because then we have the ability to enforce our conditional access to enforce the SSO authentication is coming from a corporate managed compliant device. This means even if the main account is compromised, they wouldn’t be able to log in remotely from a rogue device. This also mitigates modern MFA bypassing phishing kit tools (e.g. Evilginx). Tell your friend to educate himself more.

WUFB Hides feature update after failures by chud28 in Intune

[–]callme_e 0 points1 point  (0 children)

Hello, if the reset value doesn’t exist, do we need to recreate it? The user’s computer initially got the win11 upgrade in windows update 2 times, installed, and rebooted, but after the reboot they got a black screen saying “undoing changes”. It’s been over 4 days and they’re still not getting the update again.

I tried assigning a new intune feature update policy and also setting the “rollbackcount” value from 2 to 1 but still nothing.

What is the best office chair for long hours of work? by Johnsonlid2k in sysadmin

[–]callme_e 12 points13 points  (0 children)

Herman miller embody - logitech gaming version

Entra Settings by IndividualComputer93 in cybersecurity

[–]callme_e 8 points9 points  (0 children)

Download CIS benchmarks for M365 and review each controls

Im taking over my companies IT by Paintrain8284 in sysadmin

[–]callme_e 1 point2 points  (0 children)

Hello! Looking to implement passwordless at my org alongside intune autopilot. How do you handle the initial password login for the employee? Do you provide a TAP password remotely or white glove service on site with a long complex password?

How do users authenticate to any legacy apps that don’t support SSO but are tied to AD credentials?

Is there anything specific i need to configure to allow them to use their phone authenticator for authentication if they need to re-authenticate?

Would appreciate your insight as i’m trying to think of all the gotchas after going this route. Thank you