MDEValidator: Validate Your Microsoft Defender for Endpoint Configuration
Validate your Microsoft Defender for Endpoint configuration with MDEValidator, a free PowerShell module for local checks, reports and automation.
Microsoft 365 · Security · Compliance · Identity · Management
Practical advice for complex cloud security.
Field notes, deployment guides, and considered opinions for people building a safer modern workplace.
Featured writing
View all posts → Start with the useful stuff.
Selected deep dives and deployment notes for current Microsoft cloud security work.
Phishing-Resistant MFA: Planning Your Passkey Rollout in Microsoft 365
Microsoft is making passkeys the default authentication method in Entra ID, so now is the time to start planning your move to phishing-resistant MFA. This guide covers device-bound vs synced passkeys, Passkey Profiles, Authentication Strengths, Conditional Access, rollout strategy, legacy app considerations and the practical steps to get your Microsoft 365 environment ready.
Conditional Access Gone Too Far: Navigating Zero Trust Edge Cases
When Conditional Access meets Zero Trust, even the best intentions can backfire. In this post, we explore a real-world edge case where strict policy design blocked users from registering MFA—and how a layered policy workaround restored functionality without compromising security.
Seamlessly Migrating from Symantec Endpoint Protection to Microsoft Defender for Business
Discover how to migrate from Symantec Endpoint Protection to Microsoft Defender for Business seamlessly with tips and tools!
Explore by topic
All topics → Follow the technology, find the outcome.
Focused collections spanning cloud platforms, identity, endpoint management, security operations, data security, and the modern workplace.
Cloud platform
Azure
Cloud architecture, governance, platform security, and resilient operational foundations.
Security operationsDefender XDR & Sentinel
Threat protection, investigation, hunting, SIEM, SOAR, and practical Defender and Sentinel guidance.
Data securityPurview
Information protection, data loss prevention, insider risk, and compliance architecture.
IdentityEntra ID
Authentication, Conditional Access, identity governance, and resilient access design.
EndpointIntune
Modern endpoint management, application delivery, compliance, and platform hardening.
Modern workplaceMicrosoft 365
Architecture and operations across the Microsoft 365 platform.
Community notes
Useful ideas get better when they are shared.
Find talks, community appearances, videos, and the places where the conversation continues.