Welcome back!
This is part 2 in the CA series – if you haven’t checked Part 1 yet, you can find it here; https://prottecio.com/2025/03/02/2025-conditional-access-ca-policy-part-1-get-started/
Today we will build a policy to block risky sign-in, risky user, securing device registration and more!
Continue reading “2025 – Conditional Access (CA) policy part 2”Welcome back!
Today we will look into the world of Conditional Access – I’ll short it to CA from now.
Even though this could be done at a really fine-grained level and with great complexity – fear not; I will provide you some examples on some really great and fairly easy policies you can implement quickly and improve your security posture with low effort.
Let’s go get those low hanging fruits first!
Continue reading “2025 – Conditional Access (CA) policy part 1 – Get started!”Wow, 3 months since last post already. I blame it on a crazy busy end of the year at work combined with all the different closing-parties for the kids on school, activities and so-on – and everything that needed sorting out for Christmas. Christmas for me was all about mental wellness and spending some much needed quality time with the wife, the kids and family in general.
2023 is here, and boy has it been busy already. And what better way to start the first blog of the new year on a big Friday 13th crisis – at least if you are using Microsoft ASR(Attack Surface Reduction)-rules.
Continue reading “#ASRmageddon – All your shortcuts are belonging to us….”
