Token theft protection with Microsoft Entra, Intune, Defender XDR & Windows

Prevent attackers from stealing your identity and data by
protecting your tokens. In single sign-on systems like SAML and
OAUTH, tokens are how services know who you are and what you can
do. When you sign in to your machine with your Microsoft Entra ID
account, you are getting a session token you can use to access
things like your email, teams and other apps. Check out new
capabilities like Credential Guard in Windows enforced by device
policies in Intune, Token Protection enforcement in Microsoft
Entra, and Token theft detections in Microsoft Sentinel and
Defender XDR.


Alex Weinert, from the Microsoft Entra team, explains what tokens
are, how token theft works, and how to defend yourself from these
attacks.


 


QUICK LINKS: 
00:00 - Token theft attacks
01:39 - Token basics
02:59 - Token theft demo
03:41 - How to use token protection
05:22 - Additional Token theft defenses
06:25 - How to detect and shut down attacks
08:01 - Wrap up


 


Link References


Get started at https://aka.ms/TokenTheftDefense


 


Unfamiliar with Microsoft Mechanics? 


As Microsoft's official video series for IT, you can watch and
share valuable content and demos of current and upcoming tech
from the people who build it at Microsoft.


• Subscribe to our YouTube:
https://www.youtube.com/c/MicrosoftMechanicsSeries


• Talk with other IT Pros, join us on the Microsoft Tech
Community:
https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog


• Watch or listen from anywhere, subscribe to our podcast:
https://microsoftmechanics.libsyn.com/podcast


 


Keep getting this insider knowledge, join us on social:


• Follow us on Twitter: https://twitter.com/MSFTMechanics 


• Share knowledge on LinkedIn:
https://www.linkedin.com/company/microsoft-mechanics/


• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/


• Loosen up with us on TikTok:
https://www.tiktok.com/@msftmechanics