Hairless in the Cloud - Microsoft 365 - Security und Collaboration

Hairless in the Cloud - Microsoft 365 - Security und Collaboration

By Hairless in the CloudTechnology
Download on the App Store

Hairless in the Cloud - Microsoft 365 - Security und Collaboration episodes

  • 074 - SPECIAL Ignite 2021 H2 Recap

    Gäste

    • Thomas Naunheim (Twitter: @thomas_live)
    • Oliver Kieselbach (Twitter: @okieselb)

      • Themen: Book of news: https://news.microsoft.com/ignite-november-2021-book-of-news

      Modern Collab (Marco)

      • Microsoft Loop
      • Mesh for Microsoft Teams (Avatar as video + full VR mode)
      • Microsoft Editor with Context IQ

        • Identity (Thomas)

        • Security of Workflow Identities
        • Conditional Access Enhancements
        • Identity Governance und Entitlement Management

          • Enterprise Mobility (Oliver)

          • Custom Compliance
          • Linux Compliance
          • Linux enrollment (Intune App)
          • Defender Risk Score for macOS

            • Security (Jan)

            • MDE: Tabs in Hunting and TVM for iOS and Android
            • New Names: https://www.linkedin.com/feed/update/urn:li:activity:6861630452428505088?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A6861630452428505088%2C6861929350405611520%29
            • Sentinel Solutions and Near Realtime Rules
              • 1 hr 15 min
            • 073 - OneDrive und Sentinel Terms

              News

              • Neue MS Roadmap (nur in EN-US) https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=
              • Teams Rich Broadcasting – Cameo, Seaker Coach, Rich Q&A, Stream to linkedin https://techcommunity.microsoft.com/t5/microsoft-teams-blog/elevate-webinar-and-broadcasting-experiences-with-microsoft/ba-p/2784943
              • Teams Recording Playback up to 2x - https://m365admin.handsontek.net/microsoft-stream-variable-playback-speed-0-5-2x-for-microsoft-teams-meeting-recordings/
              • Backup and Restore Edge profile - https://regarding365.com/back-up-restore-and-migrate-microsoft-edge-browser-profiles-between-pcs-e953f7aa053d
              • Stack Overflow Keyboard - https://stackoverflow.blog/2021/09/28/become-a-better-coder-with-this-one-weird-click/

                • OneDrive

                • Files in O365
                • Files On Demand
                • No disk space waste, 3 states
                • Office is always cloud first
                • Mobile
                • Features
                • Differential Sync
                • 250 GB files
                • Easy sharing
                • Best on windows
                • Good to know
                • TMP, desktop.ini, .ds_store files are not synced
                • Sync for B2B is a thing (MFA will block)
                • Invalid character " * : < > ? / \ |
                • PST is now supported and solved by lower sync frequency and lower version history
                • https://support.microsoft.com/en-us/office/restrictions-and-limitations-in-onedrive-and-sharepoint-64883a5d-228e-48f5-b3d2-eb39e07630fa
                • Konnekt for the rescue – https://konnekt.io

                  • Sentinel

                  • Data
                  • KQL Query
                  • Events
                  • Alerts
                  • Incidents
                    • 56 min
                  • 072 - Catch-up und Brute Force gegen das AAD

                    - Windows 11

                    - Neue Surface Geräte (Studio & Duo2)

                    - Guter Samariter Attack mit AirTag: https://krebsonsecurity.com/2021/09/apple-airtag-bug-enables-good-samaritan-attack/

                    - GitHub Copilot ………………………….. Marco mal ausprobiert????

                    - Brute Force Azure AD https://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks

                      - Seamless SSO Enpoint /usernamemixed, eigentlich für hybrid joined clients für SSO

                      - Ist aber momentan für alle Tenants enabled

                      - Dagegen kann man BF attacken fahren, ohne MFA und ohne CA

                      - Diese werden nicht gelogged

                      - Es gibt auch schon einen PoC für ein BF script auf Github

                      - Gegen eine BF Attacke hilft trotzdem SmartLockout in AAD

                      - Allerdings nicht gegen password spray - es hängt also weiter an der PW Qualität

                      - Außerdem, selbst wenn einer an ein PW kommt hilft ggf noch CA oder und MFA

                      - Microsoft hat nun angekündigt, dass diese Events künftig gelogged werden und dies wurde auf TW schon bestätigt

                      - Außerdem wird  der Endpoint per default disabled und man kann ihn künftig disablen manuell

                    - Teams News

                      - https://techcommunity.microsoft.com/t5/microsoft-teams-blog/what-s-new-in-microsoft-teams-september-2021/ba-p/2793627

                      - CarPlay

                      - Pin a message

                      - Reply to message

                      - Open in Office by default

                    - Neue Apple Devices

                    - MIP Co-Authoring im Desktop GA

                      - https://techcommunity.microsoft.com/t5/security-compliance-and-identity/co-authoring-on-microsoft-information-protection-encrypted/ba-p/2693718

                      - GKGAB Webcast: https://www.youtube.com/watch?v=vOz4JIJoSW8

                    - Teams Co Organizer (Nov 2021)

                      - https://www.microsoft.com/en-in/microsoft-365/roadmap?filters=Microsoft%20Teams&searchterms=co-organize

                    - Events

                      -  Microsoft Ignite November 2–4: https://myignite.microsoft.com/home

                      - WorkplaceNinjaSummit

                    - Lightweight PLans in Planner

                      - https://m365admin.handsontek.net/lightweight-plans-in-planner

                    - Trek vs Wars: 34 Jahre https://mobile.twitter.com/jonathansfrakes/status/1443678370676437012

                    45 min
                  • 070 - Windows 11

                    News

                    • Fußball EM202(0|1) Pride: https://mobile.twitter.com/Oly_Berlin/status/1394224565551828994
                    • Hunting Queries on https://github.com/jangeisbauer
                    • Teams Feature by Platform: https://support.microsoft.com/en-us/office/teams-features-by-platform-debe7ff4-7db4-4138-b7d0-fcc276f392d3?ui=en-US&rs=en-US&ad=US
                    • Dave Kennedy Playlist: https://twitter.com/HackingDave/status/1401545215157149696?s=20
                    • Viva Insights Wellbeing
                    • https://www.youtube.com/watch?v=DnQeo4KI3lM
                    • https://techcommunity.microsoft.com/t5/microsoft-viva-blog/introducing-headspace-a-new-focus-mode-and-quiet-time-settings/ba-p/2431919
                    • New Whiteboard for Hybrid Work: https://techcommunity.microsoft.com/t5/microsoft-365-blog/meet-the-new-microsoft-whiteboard-designed-for-hybrid-work/ba-p/2445539
                    • John McAfee ist tot
                      • Und dann hat er ein Video hochgeladen: https://www.youtube.com/watch?v=bKgf5PaBzyg
                      • Teams Room System New: https://techcommunity.microsoft.com/t5/microsoft-teams-blog/new-experiences-coming-to-microsoft-teams-rooms-to-allow/ba-p/2451553
                      • Pink thumb: search for pink thumb in google store: https://emptydc.com/2021/06/22/pink-thumb/
                      • Teams Webinar Webcast: https://youtu.be/74hwAOSV0gI?t=297
                      • Visio for everyone: https://www.microsoft.com/en-us/microsoft-365/blog/2021/06/09/bringing-visio-to-microsoft-365-diagramming-for-everyone/
                      • Visual Studio 2022 Preview: https://visualstudio.microsoft.com/vs/preview/vs2022/
                      • Rename your SharePoint tenant: https://docs.microsoft.com/en-us/sharepoint/tenant-rename
                      • M365 Free DNS Domain: https://www.myo365.site/

                        • Windows 11

                        • Snaplayout
                        • Snapgroups
                        • Dock
                        • Widgets
                        • Store
                        • Android Apps
                        • Teams
                        • MSA Required for Home
                          • 1 hr 2 min
                        • 069 - DrAzureAD and AADInternals

                          Dr. Nestori Syynimaa (Senior Principal Security Researcher at Secureworks)

                          Dr Azure AD, Identity Hacker and Blackhat Speaker

                          From Finland, the Author of AADInternals -  Dr Nestori Syynimaa

                          - https://twitter.com/DrAzureAD

                          - https://o365blog.com/

                          - https://www.linkedin.com/in/nestori/

                          Topics:

                          - BPRT - Bulk Primary Refresh Tokens

                          - Join Devices to AAD

                          - Password hash sync --> seamless sign in (additional option for PHS)

                          50 min
                        • 068 - Staying Up-to-Date with Christian

                          Mit Christian Heim und Christian Keller (beide Customer Engineers bei Microsoft --> aka PFEs) sprechen

                          wir in dieser Episode über den Umgang mit dem Wandel in einer Microsoft Cloud Welt. 

                          Insbesondere sprechen wir ausgiebig über den sehr erfolgreichen Blogpost, den die beiden geschrieben haben:

                          https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/staying-on-top-of-office-365-updates/ba-p/1201118

                          1 hr 9 min
                        • 067 - Microsoft Azure Security Center with Tom and Yuri

                          Microsoft Azure Security Center, 3rd Edition available for pre-order now

                          https://www.microsoftpressstore.com/store/microsoft-azure-security-center-9780137343423


                          Guests:

                          Yuri Diogenes (Principal Program Manager at C+AI Security CxE Team at Microsoft)

                          https://www.linkedin.com/in/yuridiogenes/

                          https://twitter.com/yuridiogenes

                          https://about.me/ydio

                          https://podcasts.apple.com/podcast/id1536487206


                          Tom Janetscheck (Security Program Manager at Microsoft)

                          https://www.linkedin.com/in/thomas-janetscheck/

                          https://twitter.com/azureandbeyond

                          https://blog.azureandbeyond.com/


                          We had a great talk with Tom and Yuri regarding their new book covering Azure Security Center. Listen to the show and you will get the opportunity to win a free copy of the book!

                          45 min
                        • 066 - Tooltime

                          News

                          Hafnium

                          Ever Given - https://www.theverge.com/tldr/2021/3/25/22350300/suez-canal-ship-stuck-ever-given-boat-stuck

                          Yammer Guests - https://techcommunity.microsoft.com/t5/yammer-blog/guest-access-in-yammer-is-now-generally-available/ba-p/2218392

                          MVP Summit

                          Ignite Endpoint Manager - https://www.youtube.com/watch?v=bZUP1dh8AF8

                          I'm a PC wechselt die Seiten - https://www.thurrott.com/windows/windows-10/248213/justin-long-is-no-longer-a-mac-in-new-intel-ads?utm_source=rss&utm_medium=rss&utm_campaign=justin-long-is-no-longer-a-mac-in-new-intel-ads

                          Jan

                          Findtime

                          Remote Desktop aus dem Store

                          Power Toys Fancy Zone

                          Camtasia + Snagit

                          Marco

                          Zoomit

                          ShareX

                          Paint.net

                          PowerPoint Replace Image

                          https://m365maps.com/

                          Fun

                          https://www.youtube.com/watch?v=URqDE1l5XT4

                          https://www.youtube.com/watch?v=IbC1ZRPtOpY

                          53 min
                        • 065 - Ignite 2021H1 Recap

                          Heute mit Niklas, Oliver, Jan und Marco rund um die Ignite News

                          https://news.microsoft.com/ignite-march-2021-book-of-news/

                          Azure

                          Niklas Bachmann

                          https://www.linkedin.com/in/niklas-bachmann-66a863158/

                          • Virtual WAN updates - User VPN and VMware SD-WAN Partnering
                          • Scalable Bastion Service
                          • Azure Backup Archive Tier Preview
                          • Azure Private Marketplace GA
                          • Azure Resource Mover GA
                          • Azure Firewall Premium Preview
                          • Azure Disks Performance Tiers

                            • Collab

                            Marco Scheel

                            https://techcommunity.microsoft.com/t5/microsoft-teams-blog/what-s-new-in-microsoft-teams-microsoft-ignite-2021/ba-p/2118226

                            • Meetings
                              • Presenter View
                              • Video Layouts
                              • 1k interactive Meetings
                              • Microsoft Teams Connect
                              • Shared Channels based on B2B
                              • Teams Multi Geo
                              • Safe Links for Teams
                              • Operator Connect (Calling + Conferencing)
                              • Low Data Mode
                              • Teams + Azure Calling Services
                              • SharePoint Governance Reports (Anonymous Sharing Links)

                                • Security

                                Jan Geisbauer

                                • Security Kram eben die Show notes liest eh keiner

                                  • Windows

                                  Oliver Kieselbach

                                  https://www.linkedin.com/in/oliver-kieselbach-a4a3409/

                                  • 1 Application Reliability
                                  • 2 Restart frequency
                                  • 3 Productivity Score
                                  • Windows Update for Business improvements
                                  • 4 Driver and Firmware update policies
                                  • 5 Expediting Quality Updates
                                  • 6 Known Issue Rollback (KIR)
                                  • Delivery Optimization
                                  • 7 Cloud-based congestion detection -> prevent download storm -> service elects someone and then this device can be the super spreader
                                  • client min. 2004 -> cloud -> later this year
                                  • 8 Settings Catalog
                                  • 9 Defender + Tunnel App combined
                                  • 10 Setup Assistant iOS native MFA support -> henne ei trotzdem -> TAP
                                    • 1 hr 9 min
                                  • 064 - Temporary Access Pass und VIVA

                                    News

                                    Das Ende ist Nahe - https://twitter.com/timpritlove/status/1362756062072422405?s=20

                                    Pandemie Stay Alive Calls - https://mobile.twitter.com/vanhybrid/status/1358709192371154945

                                    New file sharing in teams - https://m365admin.handsontek.net/new-file-sharing-experience-in-microsoft-teams/

                                    Community Calls - https://developer.microsoft.com/en-us/office/blogs/microsoft-365-pnp-general-developer-sig-recording-18th-of-february-2021/

                                    Microsoft Journal - https://www.microsoft.com/en-us/garage/blog/2021/02/an-ink-first-experience-with-journal-a-microsoft-garage-project/

                                    Power Apps in Teams Milestones & Bulletins - https://techcommunity.microsoft.com/t5/microsoft-teams-blog/track-projects-and-share-news-in-teams-with-two-new-power-apps/ba-p/2118479

                                    Dave Plummer - https://www.youtube.com/watch?v=f8VBOiPV-_M

                                    TAP

                                    https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-temporary-access-pass

                                    https://goodworkaround.com/2021/02/12/checking-out-the-new-azure-ad-temporary-access-pass-preview-feature/

                                    Microsoft Viva

                                    https://www.microsoft.com/en-us/microsoft-viva

                                    Insights = MyAnalyics (früher Delve) + MyWorkplace Analytics (Böse in deutschland)

                                    Topics = Project Cortex ist Knowlegde Management mit Tags, Wiki, etc

                                    Connections = Ist quasi ein SharePoint Intranet das man auch in Teams einbinden kann (früher Home Site App)

                                    Learning = "iframe" um alle möglichen Lernplatformen in Teams anzuzeigen (LinkedIn Learning)

                                    59 min

                                  About Hairless in the Cloud - Microsoft 365 - Security und Collaboration

                                  From the publisher's feed

                                  Der deutsche Podcast rund um Microsoft Cloud Technologien: Office 365, Azure AD, Enterprise Mobility & Security, Modern Workplace & Collaboration. Präsentiert von Jan Geisbauer und Marco…