Hairless in the Cloud - Microsoft 365 - Security und Collaboration

Hairless in the Cloud - Microsoft 365 - Security und Collaboration

By Hairless in the CloudTechnology
Download on the App Store

Hairless in the Cloud - Microsoft 365 - Security und Collaboration episodes

  • 033 - EN - Ignite 2019 - Alex Simons

    Special Guest: Alex Simons (Corporate Vice President at Microsoft)

    https://twitter.com/Alex_A_Simons

    * MFA for free

    * FIDO2 without Passwords
    * AAD is the primary directory
    * User Provisioning
    * Global Reader Role
    * Frontline Worker
    * AAD Connect cloud provisioning
    * Entitlement Management

    19 min
  • 032 - EN - Ignite 2019 - Brad Anderson

    Special Guest: Brad Anderson (Corporate Vice President at Microsoft)

    https://twitter.com/Anderson

    * The big thing announced today was Microsoft Endpoint Manager that combines Intune and ConfigMgr. Would you tell us what that exactly is?

    * Do you see advantages in device management for the Intune only managed clients?
    * Another interesting thing announced today is the performance score - can you tell us a little bit about it?
    * We watch your demos, we recognize very clearly, there are nearly NO mistakes. So doing demos by our own, we know that means a lot of preparation - I wonder: what drives you?

    Ignite News

    Teams:

    * https://techcommunity.microsoft.com/t5/Microsoft-Teams-Blog/What-s-New-in-Microsoft-Teams-Ignite-2019/ba-p/937025
    * Multi Window
    * Private Channel
    * Outlook Integration
    * Yammer App

    MDATP:

    * https://techcommunity.microsoft.com/t5/Microsoft-Defender-ATP/Reducing-risk-with-new-Threat-amp-Vulnerability-Management/ba-p/978145
    * Vulnerabilty Assessment for Win Server 2008R2 und neuer
    * Integration mit Service Now
    * Advanced Hunting Erweiterung für Vulnerabilities
    * RBAC für Teams, die sich um Vulnerabilities kümmern
    * Automated user-impact analysis

    28 min
  • 031 - Ignite 2019 Pre-Day
    • Anreise zur Ignite
    • Timeshifter: App zur Jetlag-Vermeidung
    • Coole Leute an Board: Alex & Eric von https://geeksprech.de/
    • Uber: Pickups everywhere

      • Cybersecurity Workshop

      • Microft Ciso Bret Arsenault: I drink because your password is "password" - I have a job because your password is password
      • Maersk all over
      • Jeremiah Grossman - Sentinel One
      • Blythe Price: phishing assesments gegen MS user
      • Pete Boden: CDOC, Microsoft SOC (8-9 redteams)

        • Microsoft 365 Development

        • Ben Summers: Kickoff, Marketing, Meeting-App in Teams
        • Jeremy Thake: MS Graph overview Q&A
        • Darrel Miller: MS Graph PowerShell
        • Joey Glocke: MS Teams Dev
        • Vessa Juvonen: Sharepoint SPFX
        • Matt Hiddinger: Hidden Gem Adaptive Cards
          • 31 min
        • 030 - User Talks und Microsoft Stream Update

          # News

          * Hairless mitten in den Ignite Vorbereitungen

          * Future is here: Beyond Meat, Uber + ApplePay

          * Elektroauto Kaufprämie 183 Millionen von 600 Millionen ausbezahlt (Zuschüsse 4.000 für E und 3.000 für Hybrid-Autos): https://www.heise.de/newsticker/meldung/Elektroauto-Kaufpraemie-183-Millionen-von-600-Millionen-Euro-ausbezahlt-4559551.html

          * Smarter Rosenkranz: https://www.heise.de/newsticker/meldung/Spirituelles-Gadget-Smarter-Rosenkranz-aus-dem-Vatikan-4558723.html

          * iPhones sind nicht sicher, deshalb lieber zu Android: https://www.bbc.com/news/technology-50080586 & https://www.bbc.com/news/technology-50085630

          * Ab Dezember keinen Appstore mehr für Windows Phone: https://www.heise.de/newsticker/meldung/Windows-Phone-8-1-Microsoft-sperrt-den-Laden-zu-4559048.html

          * Mein und "dein" Surface Book 2 ist gefixed: https://mspoweruser.com/microsoft-says-they-have-solved-surface-book-2-gpu-issues-with-new-firmware-update/

          # Per MS Flow auf MDATP Alerts reagieren

          * https://emptydc.com/2019/10/16/mdatp-talking-to-the-user/

          # Microsoft Stream Update

          https://techcommunity.microsoft.com/t5/Microsoft-Stream-Blog/What-s-new-in-Microsoft-Stream-October-2019/ba-p/917009

          * Schneiden von Videos (Start/Ende) direkt im Web

          * Ersetzen von Videos (URL und Views bleiben erhalten)

          * Papierkorb für Videos (User und Admin)

          * Office 365 Video Migration kann durch den Admin gestartet werden

          * Transcript nun endlich auch in Deutsch

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud

          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)

          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          34 min
        • 029 - Evilginx, Alex Weinert und Modern Collab Licensing

          # News

          * Message center

          * Emailabsender für SPO Links: https://www.microsoft.com/de-de/microsoft-365/roadmap?filters=&searchterms=56361

          * Teams Live Caption: https://www.microsoft.com/de-de/microsoft-365/roadmap?searchterms=52817&rtc=1&market=de&filters=&searchterms=%2C52817

          * Service Health Email: https://www.microsoft.com/de-de/microsoft-365/roadmap?filters=&searchterms=24231

          * SharePoint Startseite: https://www.microsoft.com/de-de/microsoft-365/roadmap?filters=&searchterms=54821

          * 16 Neue Admin Rollen: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/16-new-built-in-roles-including-Global-reader-now-available-in/ba-p/900749

          * MINT @GlückKanja: https://www.glueckkanja.com/blog/gk/ausbildung/2019/10/mint-camp-at-gk/

          * ScannerGate: https://www.youtube.com/watch?v=7FeqF1-Z1g0

          # Evilginx, Alex Weinert

          * FIDO2 is your friend

          * All your creds are belong to us: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/All-your-creds-are-belong-to-us/ba-p/855124

          * https://twitter.com/janvonkirchheim/status/1180412826474729472

          # Modern Collab License

          https://docs.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview

          * Ziel: Microsoft 365 E3 + Identity & Threat Protection

          * Lizenzposter: https://docs.microsoft.com/en-us/microsoft-365/enterprise/media/m365-poster/Microsoft365Enterprise.pdf

          * Office 365

          * ProPlus = 12 USD

          * E1 = 8 USD

          * E3 = 20 USD

          * E5 = 35 USD

          * M365

          * F1 = 9 USD

          * E3 = 32 USD

          * E5 = 55 USD

          * M365 Features

          * Windows: F1, E3, E5

          * Office Apps: E1, E5

          * EXO, SPO, Teams, ...: F1, E3, E5

          * UC: E5

          * Thread protection: E5

          * BI: E5

          * Identity & Threat Protection = 12 USD

          * Azure Advanced Threat Protection (ATP)

          * Windows Defender ATP

          * Office 365 ATP einschließlich Threat Intelligence

          * Microsoft Cloud App Security und Azure Active Directory P2

          * Information Protection & Compliance = 10 USD

          * Office 365 Advanced Compliance

          * Azure Information Protection

          * Alle Angaben ohne Gewähr und in USD pro User pro Monat

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud

          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)

          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          35 min
        • 028 - Gummi Enten und O4B B2B Sync

          # News

          * Office ATP kann jetzt im Threat Explorer die Email direkt runterladen um sie so zu untersuchen

          * SP/O365 UserGroup am 23.10.2019 by der DBSystel: https://www.xing.com/events/gast-db-systel-teams-sharepoint-fokus-2271939

          * Surface Pro 7/X, Surface Laptop 2, Surface Earbuds, Surface Duo/Neo: https://www.youtube.com/watch?v=dmaioTs0NH8

          * Demystifying AI in Microsoft 365: https://www.youtube.com/watch?v=VEGUmeRS7G8

          * SharePoint Migration Toolkit SP2010: https://techcommunity.microsoft.com/t5/Microsoft-SharePoint-Blog/SharePoint-Migration-Tool-now-supports-SharePoint-Server-2010/ba-p/875859

          * Mute teams thread/Secondary ringer/Chrome calling: https://techcommunity.microsoft.com/t5/Microsoft-Teams-Blog/What-s-New-in-Microsoft-Teams-September-2019/ba-p/881539

          # Gummi Enten und was man dagegen tun kann

          *  Rubber Ducky und P4wnP1 A.L.O.A mit advanced hunting begegenen

          # OneDrive for Business B2B Sync

          * https://docs.microsoft.com/en-us/onedrive/b2b-sync

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud

          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)

          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          45 min
        • 027 – Christopher Hackenschmidt

          # Gast

          * Christopher Hackenschmidt - Glück & Kanja Consulting AG

          # Thema

          * Microsoft loves Linux

          * OpenSource

          * On-Premises Cloud

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud

          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)

          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          57 min
        • 026 - Zero Trust und Modern Collab Roadmap

          # Gast

          * Karsten Kleinschmidt, Lead Cloud Architect, Glück & Kanja Consulting AG

          * https://karstenkleinschmidt.de

          * Twitter: @KarstenonIT

          # News

          * Office 365 Video Migration startet: https://docs.microsoft.com/en-us/stream/migrate-from-office-365

          * Neue Schrift für Developer/Consolen: https://devblogs.microsoft.com/commandline/cascadia-code/

          * Modern Workplace bei Microsoft: https://twitter.com/NerdPyle/status/1174441456326467584?s=20

          * Pocket Cast Free: https://www.androidcentral.com/pocket-casts-one-androids-best-podcast-apps-now-free

          * iPhone + NFC - Kommt FIDO support: https://twitter.com/KarstenonIT/status/1174034165513117696?s=20

          # Zero Trust (by Karsten)

          * Die Annahme ist wir haben kein sicheres Netzwerk mehr

          * Assume Breach Zeitalter

          * Security wandert zur Identity

          * 99% der Phishing Attacks wären durch MFA verhindert worden

          * Conditional Access als Steuerelement

          * FIDO, Passwordless, Hello For Business

          # Modern Collab Roadmap

          * Sharing Reports for SharePoint Online: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=27034

          * Sharing Requests aus dem Site permission panel: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=54983

          * Pinned Channels: https://www.microsoft.com/microsoft-365/roadmap?filters=&featureid=55369

          * Das Ende des Upload Center: https://admin.microsoft.com/Adminportal/Home?source=applauncher#/MessageCenter?id=MC190284 (O365 Admin Notwending)

          * Site Swap: https://www.microsoft.com/microsoft-365/roadmap?filters=&featureid=51259

          * Planner Priority: https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=54786

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud

          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)

          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          37 min
        • 025 - Böse Externe und MDATP Evaluation Lab

          # News

          * Netflix Doku über BillG:20. September

          * Bewertung von CVEs: https://nvd.nist.gov/vuln-metrics/cvss (common vulnerability scoring system)

          * iPhone 11 Pro Max: https://www.theverge.com/2019/9/10/20840715/apple-iphone-11-event-live-blog-announcement-photos

          * Karsten bloggt: https://karstenkleinschmidt.de

          * Microsoft Musical: https://www.youtube.com/watch?v=ZGeWNR8CWnA

          * Surface Hub 2 S UserGroup mit MVP: https://www.xing.com/events/o365-spug-frankfurt-surface-hub-2s-office-365-absichern-2150852

          * Groups für Outlook.com: https://support.office.com/en-us/article/learn-more-about-outlook-com-groups-c8769380-e3df-451c-acc6-eda7835f3b9c

          * Office Developer Subscription jetzt mit M365 E5: https://docs.microsoft.com/en-us/office/developer-program/office-365-developer-program-get-started

          # Böse Externe

          * Schatten IT beim Teilen von Daten

          * Email, DropBox, Fremde SharePoints

          * Nicht alle Daten sind gleich

          * Azure B2B kann CA + MFA, aber ist das das richtige?

          * Firewallansatz: Alles zu und dann schauen funktioniert nicht gut

          * Azure AD B2B + Custom Governance

          # MDATP Evaluation Lab

          * https://techcommunity.microsoft.com/t5/Microsoft-Defender-ATP/Test-security-products-the-right-way-and-find-new-protection/ba-p/848857

          * https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/evaluation-lab

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud

          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)

          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          31 min
        • 024 - Office ATP Safe Attachments und Teams App permission policies

           # News

          * Windows ist ganz schön sicher: https://www.spiegel.de/netzwelt/gadgets/apple-hacker-patrick-wardle-ein-mac-ist-leicht-zu-hacken-a-1281361.html
          * Ninja (Twitch Streamer und Fortnite Player) macht jetzt Mixer: https://twitter.com/Ninja/status/1156970023421915136?s=20
          * Samsung und Microsoft Coop beim Note 10 Launch: https://blogs.windows.com/windowsexperience/2019/08/07/microsoft-and-samsung-partner-to-empower-you-to-achieve-more/
          * MDATP AMA: @WindowsATP oder #MDATPAMA
          * Microsoft Team Policy rollout (Discover + Private Channel): https://docs.microsoft.com/en-us/MicrosoftTeams/teams-policies
          * Security muss mit PR und Marketing zusammenarbeiten: https://www.itprotoday.com/big-data/black-hat-2019-deepfakes-require-rethink-incident-response
          * Teams Channel Moderation: https://docs.microsoft.com/en-us/microsoftteams/manage-channel-moderation-in-teams
          * Access Review mit Teams (EN): https://marcoscheel.de/post/186728523052/mange-microsoft-teams-membership-with-azure-ad
          * MDATP Streaming API

          # Office ATP Safe Attachments

          * Office Macro executing .cmd file --> Delivered
          * Office Macro executing .cmd file that loads PS and downloads file --> Blocked
          * Zipped Office Macro executing .cmd file that loads PS and downloads file --> Blocked
          * PW protected Office Macro executing .cmd that loads PS and downloads file --> Delivered
          * Zipped, nrenamed to .txt or embedded 'Mimikatz' --> Blocked
          * Base64 encoded Mimikatz --> Blocked
          * Custom app that downloads .cmd file which creates folder (mkdir) --> Delivered
          * Cusotm App that additionally writes to registry (Start/Run) --> Blocked

          # Teams App permission policies

          Mit dieser Änderung kann der Teams Admin erstmals Apps an einzelene User verteilen. Es kann noch immer Tenant-Wide eingeschränkt werden (ging im normalen MS Admin center unter Services & Settings). Jetzt kann ich einzelnen Usern der Installieren einer App erlauben.
          * Org Wide Settings (überschreibt alle Policies!)
          * Block 3rd Party generell
          * Block all custom apps
          * Block specific app
          * Policy settings
          * Allow all
          * Allow specific black all
          * Block specify and allow other
          * Block all
          * Gobal Policy
          * MS Apps
          * 3rd Party
          * Tenant
          * User definded policies
          * based on user asignment (still no group assignment)
          Wenn geblock wird dann kann der Benutzer die App nicht verwenden (Tab wird zum Beispiel nicht angezeigt)

          # Feedback, Kritik, Lob, Fragen?

          * Twitter: @hairlesscloud
          * Web: www.hairlessinthecloud.com (Links zu allen Podcast Plattformen)
          * Coverarts & new Audio Intro by CARO (mit Hilfe von pixabay.com)

          34 min

        About Hairless in the Cloud - Microsoft 365 - Security und Collaboration

        From the publisher's feed

        Der deutsche Podcast rund um Microsoft Cloud Technologien: Office 365, Azure AD, Enterprise Mobility & Security, Modern Workplace & Collaboration. Präsentiert von Jan Geisbauer und Marco…