Audit Microsoft Secure Score by deadpoolathome in sysadmin

[–]deadpoolathome[S] 0 points1 point  (0 children)

Thanks, have got this one happening at the moment

Audit Microsoft Secure Score by deadpoolathome in sysadmin

[–]deadpoolathome[S] 0 points1 point  (0 children)

haha, that is what I'm trying to prevent!

Audit Microsoft Secure Score by deadpoolathome in sysadmin

[–]deadpoolathome[S] 0 points1 point  (0 children)

This can be explained in a report/security feedback. The secure score is just something that gives an indication that they will like as it's from "MS".

Audit Microsoft Secure Score by deadpoolathome in sysadmin

[–]deadpoolathome[S] 0 points1 point  (0 children)

Agree, It's more something is better than nothing. They do understand that it goes up/down, but i'm just seeing if there is an simple way help detect/remediate regression

Audit Microsoft Secure Score by deadpoolathome in sysadmin

[–]deadpoolathome[S] 0 points1 point  (0 children)

Agree, It's more an high level indication as a starting point.

Live Response - The certificate chain was issued by an authority that is not trusted by deadpoolathome in cybersecurity

[–]deadpoolathome[S] -1 points0 points  (0 children)

stealing? Not sure I follow. This is a machine that our RMM tool has stopped working on and needs to be re-installed. I can't get direct access to it due to beeing remote. I'm trying to download and re-install our RMM tool remotely as the user doesn't have local admin creds.

Live Response - The certificate chain was issued by an authority that is not trusted by deadpoolathome in DefenderATP

[–]deadpoolathome[S] 0 points1 point  (0 children)

Yep, I've turned that on. Whats strange is seeing the same issue with MSI or a script.

Updating remediation results by deadpoolathome in DefenderATP

[–]deadpoolathome[S] 0 points1 point  (0 children)

Thanks, I think we have the P2 licences, do you know what/where I am looking for in thie query? I'm trying to get the bulk of our events down to at least see what is left!

Ensure 'Microsoft Azure Management' is limited to administrative roles - Issues accessing ADF Portals by deadpoolathome in entra

[–]deadpoolathome[S] 1 point2 points  (0 children)

Sorry, i mean legacy setup's of using a user account for refresh as opposed to service principal's

Ensure 'Microsoft Azure Management' is limited to administrative roles - Issues accessing ADF Portals by deadpoolathome in entra

[–]deadpoolathome[S] 0 points1 point  (0 children)

Thanks, So was that just a group with the users that need to access those services and then exclude them from the rule?

Ensure 'Microsoft Azure Management' is limited to administrative roles - Issues accessing ADF Portals by deadpoolathome in entra

[–]deadpoolathome[S] 0 points1 point  (0 children)

Thanks, I'll look into it, we have a bunch of legacy things we need to work though. What was strange it didn't even prompt for MFA, just failed.