4 ms·
They should look at upgrading their Entra ID plan to P2 in order to protect against these attacks.
by clwg 3y ago
They should look at upgrading their Entra ID plan to P2 in order to protect against these attacks.
- this_steve_j 3y agoAnd all things considered, an AI security assistant like Copilot might be a good investment too, if they lack highly skilled front line security staff. Not to mention, AI generated automated playbooks in Sentinel to automatically apply Zero Trust principles! I also wonder if they had upgraded all of their Subscriptions to Defender for Cloud CSPM Tier 2 in order to use the premium Cloud Security Attack Graph explorer, and then enabled Workload protections, this tragedy could have been averted. It’s going to take an army of motivated sales engineers to protect against these new cybernetic attacks by augmented warfighters.
- Voultapher 3y agoLost my sanity there for a moment before realizing what you did. Good job!
- voidwtf 3y agoI wonder if they switched from user-based MFA to Conditional Access MFA yet, maybe they forgot to enable alerting for non-interactive logins. Maybe they forgot to update the Log Analytics Agent to the Azure Monitoring Agent. /s