Helvede

0 posts0 participants0 posts today

Buttered JortsHey Mastodon, question for my <a href="https://infosec.exchange/tags/sysadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sysadmin</a> and <a href="https://infosec.exchange/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevOps</a> types. Has anyone used <a href="https://infosec.exchange/tags/Pester" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pester</a> and <a href="https://infosec.exchange/tags/PSScriptAnalyzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PSScriptAnalyzer</a> to set up unit testing for test driven development, particularly on (relatively) simple scripts like you might use for application detection, installation, and uninstallation from a system like <a href="https://infosec.exchange/tags/SCCM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SCCM</a> <a href="https://infosec.exchange/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> or <a href="https://infosec.exchange/tags/ManageEngine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ManageEngine</a> ?Apologies for the buzzword bingo, but I’m trying to reach folks who may be following the hashtags, but not necessarily have a connection otherwise.<a href="https://infosec.exchange/tags/TDD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TDD</a> <a href="https://infosec.exchange/tags/unittests" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unittests</a>

zwangseinweisungCurrent work on <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> with <a href="https://mastodon.social/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> and <a href="https://mastodon.social/tags/MDM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MDM</a>

ManuI don't know if this is known but last week I found out that giving a user the <a href="https://infosec.exchange/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> OOBE experience can be abused for privilege escalation.Scenario: A company gives a new employee his computer and lets him do the first login. During the <a href="https://infosec.exchange/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> OOBE, he presses SHIFT+F10 and opens CMD. Since this CMD runs as SYSTEM, he installs a custom CA certificate via certutil, places 'WptsExtensions.dll' into System32, and creates a new local backdoor admin user.Once the <a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> OOBE and/or <a href="https://infosec.exchange/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> setup is complete, only the local backdoor admin user will be deleted. The certificate and DLL still remain. A reboot is enough to trigger the DLL being loaded as SYSTEM.The third-party cert could be detected using sigcheck, but that's a little hacky...Does anyone know a fix for this? I've not found anything inside <a href="https://infosec.exchange/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> that would kill this vector.

Fabian BaderGreat writeup that demonstrates that Intune is really powerful and you should not manage your PAW devices from the same environment they manage.<a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://infosec.exchange/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> <a href="https://infosec.exchange/tags/ControlPlane" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ControlPlane</a> <a href="https://infosec.exchange/tags/RedTenant" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RedTenant</a><a href="https://cloud.google.com/blog/topics/threat-intelligence/abusing-intune-permissions-entra-id-environments" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cloud.google.com/blog/topics/threat-intelligence/abusing-intune-permissions-entra-id-environments</a>

Buttered JortsHey <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> and <a href="https://infosec.exchange/tags/sysadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sysadmin</a> types of <a href="https://infosec.exchange/tags/Texas" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Texas</a>, any recommendations for local conferences, trainings, and/or user groups? My team just received our conference and training budget, and suffice it to say that national level conferences aren't happening, so I'm looking into alternatives. Our focus is <a href="https://infosec.exchange/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> workstation management, with an end state of primarily <a href="https://infosec.exchange/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> managed devices with possibly a small <a href="https://infosec.exchange/tags/SCCM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SCCM</a> / <a href="https://infosec.exchange/tags/MECM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MECM</a> environment.

Lukas BeranPlatform SSO for macOS is finally here!Microsoft Intune now supports Platform SSO for macOS. Platform SSO expands the SSO app extension by allowing you to configure different authentication methods, simplify the sign-in process for users, and reduce the number of passwords they need to remember.Platform SSO is a phishing-resistant MFA on macOS that supports passkeys and is very similar to Windows Hello for Business. And also, with platform SSO, your macOS devices become Microsoft Entra joined instead of registered, which allows also other Microsoft Entra ID users to sign-in to company-managed macOS devices.Read more on my blog 👇👇 <a href="https://www.cswrld.com/2024/05/how-to-configure-platform-sso-for-macos-via-intune/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.cswrld.com/2024/05/how-to-configure-platform-sso-for-macos-via-intune/</a><a href="https://infosec.exchange/tags/platformsso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#platformsso</a> <a href="https://infosec.exchange/tags/macos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#macos</a> <a href="https://infosec.exchange/tags/intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#intune</a> <a href="https://infosec.exchange/tags/entraid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#entraid</a> <a href="https://infosec.exchange/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://infosec.exchange/tags/devicejoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devicejoin</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/tips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tips</a>

GrayHi everyone,I'm gearing up my search for a new role, and new challenges.I'm a Principal Endpoint Management & Security Engineer, specialising in deployment, management, and security at scale (5k-10k device range).Some technologies I work with every day are <a href="https://fosstodon.org/tags/Jamf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Jamf</a> <a href="https://fosstodon.org/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a> <a href="https://fosstodon.org/tags/SCCM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SCCM</a> <a href="https://fosstodon.org/tags/Microsoft365" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft365</a> <a href="https://fosstodon.org/tags/MicrosoftDefender" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MicrosoftDefender</a> <a href="https://fosstodon.org/tags/macOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#macOS</a> <a href="https://fosstodon.org/tags/Windows" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Windows</a> <a href="https://fosstodon.org/tags/WindowsServer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WindowsServer</a>You can find more information about my experience here: <a href="https://www.linkedin.com/in/gwilliamsuk/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.linkedin.com/in/gwilliamsuk/</a>Boosts appreciated.<a href="https://fosstodon.org/tags/JobSearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JobSearch</a> <a href="https://fosstodon.org/tags/GetFediHired" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GetFediHired</a> <a href="https://fosstodon.org/tags/RemoteJobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RemoteJobs</a> <a href="https://fosstodon.org/tags/JobSeeker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JobSeeker</a>

Paul Sanders 😎👋 to all my new followers! As it’s been a while since I’ve done this, thought I’d introduce myself and let you know what I’m about I’m a <a href="https://infosec.exchange/tags/freelance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freelance</a> <a href="https://infosec.exchange/tags/consultant" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#consultant</a> from Manchester, and focus on Identity & access management strategy, with platform governance and modern management.I’ve recently started a <a href="https://infosec.exchange/tags/newsletter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#newsletter</a>, which should start being sent in the next couple of weeks. You can sign up at <a href="https://tameyourcloud.com/newsletter" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tameyourcloud.com/newsletter</a> Finally, I’ve recently moved my blog under the <a href="https://infosec.exchange/tags/TameYourCloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TameYourCloud</a> brand, which you can read at <a href="https://tameyourcloud.com/blog" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tameyourcloud.com/blog</a> .<a href="https://infosec.exchange/tags/iam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iam</a> <a href="https://infosec.exchange/tags/entraid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#entraid</a> <a href="https://infosec.exchange/tags/landingzone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#landingzone</a> <a href="https://infosec.exchange/tags/azure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#azure</a> <a href="https://infosec.exchange/tags/intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#intune</a>

Paul Sanders 😎I’m really not liking how <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> is key to everyone’s marketing strategy… especially in the <a href="https://infosec.exchange/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> space. Most orgs I work with are not mature in their identity/endpoint management space, and have a lot to do with the basics. Why push the whole AI sell when 99% of the user base will get zero benefit? <a href="https://infosec.exchange/tags/microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#microsoft</a> <a href="https://infosec.exchange/tags/defender" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#defender</a> <a href="https://infosec.exchange/tags/intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#intune</a> <a href="https://infosec.exchange/tags/entra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#entra</a> <a href="https://www.microsoft.com/en-us/security/blog/2023/06/26/why-endpoint-management-is-key-to-securing-an-ai-powered-future/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.microsoft.com/en-us/security/blog/2023/06/26/why-endpoint-management-is-key-to-securing-an-ai-powered-future/</a>

Jon Lonergan👋Hi! My name is Jon, and I’m an IT client systems engineer. I enjoy all things Apple, especially trying new third party indie apps. I’m also into food, music, guitars, clean energy, EVs, consumer tech, home automation, and all sorts of gadgets. Let’s connect! <a href="https://mastodon.social/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introduction</a> <a href="https://mastodon.social/tags/introductions" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introductions</a> <a href="https://mastodon.social/tags/macadmins" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#macadmins</a> <a href="https://mastodon.social/tags/twittermigration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twittermigration</a> <a href="https://mastodon.social/tags/intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#intune</a> <a href="https://mastodon.social/tags/jamf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jamf</a> <a href="https://mastodon.social/tags/apple" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apple</a> <a href="https://mastodon.social/tags/microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#microsoft</a> <a href="https://mastodon.social/tags/apps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apps</a> <a href="https://mastodon.social/tags/indiedev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#indiedev</a> <a href="https://mastodon.social/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tech</a> <a href="https://mastodon.social/tags/music" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#music</a> <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Anthony J. FontanezHello, a quick <a href="https://infosec.exchange/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introduction</a>.I'm AJ, an IT professional in the Microsoft space for 10+ years. I mostly work with <a href="https://infosec.exchange/tags/ConfigMgr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ConfigMgr</a>, <a href="https://infosec.exchange/tags/Intune" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Intune</a>, <a href="https://infosec.exchange/tags/ActiveDirectory" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActiveDirectory</a>, and <a href="https://infosec.exchange/tags/AzureAD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AzureAD</a>. I'm currently a ConfigMgr Customer Engineer for Microsoft as a vendor. I'm also one of the admins of the WinAdmins Community (<a href="https://winadmins.io" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://winadmins.io</a>). Endpoint management, AuthN/AuthZ, and security/infosec all greatly interest me. Ask me about deploying internet-accessible domain controllers in a secure fashion, it CAN be done! 😁In my free time, I enjoy learning and helping others on various social media platforms with tech-related stuff, tinkering in my home lab, and writing the occasional technical blog post about stuff I do (<a href="https://anthonyfontanez.com" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://anthonyfontanez.com</a>).Feel free to hit me up at any time if you've got a question or comment about something I've posted or shared, feedback is always welcome! You can find me as ajf8729 on most platforms (Twitter, GitHub, LinkedIn, etc.).-AJ

Recent searches

Search options

Administered by:

Server stats:

#intune