Hairless in the Cloud - Microsoft 365 - Security und Collaboration Archiv

Gäste

Thomas Naunheim (Twitter: @thomas_live)

Oliver Kieselbach (Twitter: @okieselb)

Themen: Book of news: https://news.microsoft.com/ignite-november-2021-book-of-news

Modern Collab (Marco)

Microsoft Loop

Mesh for Microsoft Teams (Avatar as video + full VR mode)

Microsoft Editor with Context IQ

Identity (Thomas)

Security of Workflow Identities

Conditional Access Enhancements

Identity Governance und Entitlement Management

Enterprise Mobility (Oliver)

Custom Compliance

Linux Compliance

Linux enrollment (Intune App)

Defender Risk Score for macOS

Security (Jan)

MDE: Tabs in Hunting and TVM for iOS and Android

New Names: https://www.linkedin.com/feed/update/urn:li:activity:6861630452428505088?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A6861630452428505088%2C6861929350405611520%29

Sentinel Solutions and Near Realtime Rules

News

Neue MS Roadmap (nur in EN-US) https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=

Teams Rich Broadcasting – Cameo, Seaker Coach, Rich Q&A, Stream to linkedin https://techcommunity.microsoft.com/t5/microsoft-teams-blog/elevate-webinar-and-broadcasting-experiences-with-microsoft/ba-p/2784943

Teams Recording Playback up to 2x - https://m365admin.handsontek.net/microsoft-stream-variable-playback-speed-0-5-2x-for-microsoft-teams-meeting-recordings/

Backup and Restore Edge profile - https://regarding365.com/back-up-restore-and-migrate-microsoft-edge-browser-profiles-between-pcs-e953f7aa053d

Stack Overflow Keyboard - https://stackoverflow.blog/2021/09/28/become-a-better-coder-with-this-one-weird-click/

OneDrive

Files in O365

Files On Demand

No disk space waste, 3 states

Office is always cloud first

Mobile

Features

Differential Sync

250 GB files

Easy sharing

Best on windows

Good to know

TMP, desktop.ini, .ds_store files are not synced

Sync for B2B is a thing (MFA will block)

Invalid character " * : < > ? / \ |

PST is now supported and solved by lower sync frequency and lower version history

https://support.microsoft.com/en-us/office/restrictions-and-limitations-in-onedrive-and-sharepoint-64883a5d-228e-48f5-b3d2-eb39e07630fa

Konnekt for the rescue – https://konnekt.io

Sentinel

Data

KQL Query

Events

Alerts

Incidents

- Windows 11

- Neue Surface Geräte (Studio & Duo2)

- Guter Samariter Attack mit AirTag: https://krebsonsecurity.com/2021/09/apple-airtag-bug-enables-good-samaritan-attack/

- GitHub Copilot ………………………….. Marco mal ausprobiert????

- Brute Force Azure AD https://www.secureworks.com/research/undetected-azure-active-directory-brute-force-attacks

  - Seamless SSO Enpoint /usernamemixed, eigentlich für hybrid joined clients für SSO

  - Ist aber momentan für alle Tenants enabled

  - Dagegen kann man BF attacken fahren, ohne MFA und ohne CA

  - Diese werden nicht gelogged

  - Es gibt auch schon einen PoC für ein BF script auf Github

  - Gegen eine BF Attacke hilft trotzdem SmartLockout in AAD

  - Allerdings nicht gegen password spray - es hängt also weiter an der PW Qualität

  - Außerdem, selbst wenn einer an ein PW kommt hilft ggf noch CA oder und MFA

  - Microsoft hat nun angekündigt, dass diese Events künftig gelogged werden und dies wurde auf TW schon bestätigt

  - Außerdem wird  der Endpoint per default disabled und man kann ihn künftig disablen manuell

- Teams News

  - https://techcommunity.microsoft.com/t5/microsoft-teams-blog/what-s-new-in-microsoft-teams-september-2021/ba-p/2793627

  - CarPlay

  - Pin a message

  - Reply to message

  - Open in Office by default

- Neue Apple Devices

- MIP Co-Authoring im Desktop GA

  - https://techcommunity.microsoft.com/t5/security-compliance-and-identity/co-authoring-on-microsoft-information-protection-encrypted/ba-p/2693718

  - GKGAB Webcast: https://www.youtube.com/watch?v=vOz4JIJoSW8

- Teams Co Organizer (Nov 2021)

  - https://www.microsoft.com/en-in/microsoft-365/roadmap?filters=Microsoft%20Teams&searchterms=co-organize

- Events

  -  Microsoft Ignite November 2–4: https://myignite.microsoft.com/home

  - WorkplaceNinjaSummit

- Lightweight PLans in Planner

  - https://m365admin.handsontek.net/lightweight-plans-in-planner

- Trek vs Wars: 34 Jahre https://mobile.twitter.com/jonathansfrakes/status/1443678370676437012

News

Fußball EM202(0|1) Pride: https://mobile.twitter.com/Oly_Berlin/status/1394224565551828994

Hunting Queries on https://github.com/jangeisbauer

Teams Feature by Platform: https://support.microsoft.com/en-us/office/teams-features-by-platform-debe7ff4-7db4-4138-b7d0-fcc276f392d3?ui=en-US&rs=en-US&ad=US

Dave Kennedy Playlist: https://twitter.com/HackingDave/status/1401545215157149696?s=20

Viva Insights Wellbeing

https://www.youtube.com/watch?v=DnQeo4KI3lM

https://techcommunity.microsoft.com/t5/microsoft-viva-blog/introducing-headspace-a-new-focus-mode-and-quiet-time-settings/ba-p/2431919

New Whiteboard for Hybrid Work: https://techcommunity.microsoft.com/t5/microsoft-365-blog/meet-the-new-microsoft-whiteboard-designed-for-hybrid-work/ba-p/2445539

John McAfee ist tot

Und dann hat er ein Video hochgeladen: https://www.youtube.com/watch?v=bKgf5PaBzyg

Teams Room System New: https://techcommunity.microsoft.com/t5/microsoft-teams-blog/new-experiences-coming-to-microsoft-teams-rooms-to-allow/ba-p/2451553

Pink thumb: search for pink thumb in google store: https://emptydc.com/2021/06/22/pink-thumb/

Teams Webinar Webcast: https://youtu.be/74hwAOSV0gI?t=297

Visio for everyone: https://www.microsoft.com/en-us/microsoft-365/blog/2021/06/09/bringing-visio-to-microsoft-365-diagramming-for-everyone/

Visual Studio 2022 Preview: https://visualstudio.microsoft.com/vs/preview/vs2022/

Rename your SharePoint tenant: https://docs.microsoft.com/en-us/sharepoint/tenant-rename

M365 Free DNS Domain: https://www.myo365.site/

Windows 11

Snaplayout

Snapgroups

Dock

Widgets

Store

Android Apps

Teams

MSA Required for Home

Dr. Nestori Syynimaa (Senior Principal Security Researcher at Secureworks)

Dr Azure AD, Identity Hacker and Blackhat Speaker

From Finland, the Author of AADInternals -  Dr Nestori Syynimaa

- https://twitter.com/DrAzureAD

- https://o365blog.com/

- https://www.linkedin.com/in/nestori/

Topics:

- BPRT - Bulk Primary Refresh Tokens

- Join Devices to AAD

- Password hash sync --> seamless sign in (additional option for PHS)

Mit Christian Heim und Christian Keller (beide Customer Engineers bei Microsoft --> aka PFEs) sprechen

wir in dieser Episode über den Umgang mit dem Wandel in einer Microsoft Cloud Welt. 

Insbesondere sprechen wir ausgiebig über den sehr erfolgreichen Blogpost, den die beiden geschrieben haben:

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/staying-on-top-of-office-365-updates/ba-p/1201118

Microsoft Azure Security Center, 3rd Edition available for pre-order now

https://www.microsoftpressstore.com/store/microsoft-azure-security-center-9780137343423

Guests:

Yuri Diogenes (Principal Program Manager at C+AI Security CxE Team at Microsoft)

https://www.linkedin.com/in/yuridiogenes/

https://twitter.com/yuridiogenes

https://about.me/ydio

https://podcasts.apple.com/podcast/id1536487206

Tom Janetscheck (Security Program Manager at Microsoft)

https://www.linkedin.com/in/thomas-janetscheck/

https://twitter.com/azureandbeyond

https://blog.azureandbeyond.com/

We had a great talk with Tom and Yuri regarding their new book covering Azure Security Center. Listen to the show and you will get the opportunity to win a free copy of the book!

News

Hafnium

Ever Given - https://www.theverge.com/tldr/2021/3/25/22350300/suez-canal-ship-stuck-ever-given-boat-stuck

Yammer Guests - https://techcommunity.microsoft.com/t5/yammer-blog/guest-access-in-yammer-is-now-generally-available/ba-p/2218392

MVP Summit

Ignite Endpoint Manager - https://www.youtube.com/watch?v=bZUP1dh8AF8

I'm a PC wechselt die Seiten - https://www.thurrott.com/windows/windows-10/248213/justin-long-is-no-longer-a-mac-in-new-intel-ads?utm_source=rss&utm_medium=rss&utm_campaign=justin-long-is-no-longer-a-mac-in-new-intel-ads

Jan

Findtime

Remote Desktop aus dem Store

Power Toys Fancy Zone

Camtasia + Snagit

Marco

Zoomit

ShareX

Paint.net

PowerPoint Replace Image

https://m365maps.com/

Fun

https://www.youtube.com/watch?v=URqDE1l5XT4

https://www.youtube.com/watch?v=IbC1ZRPtOpY

Heute mit Niklas, Oliver, Jan und Marco rund um die Ignite News

https://news.microsoft.com/ignite-march-2021-book-of-news/

Azure

Niklas Bachmann

https://www.linkedin.com/in/niklas-bachmann-66a863158/

Virtual WAN updates - User VPN and VMware SD-WAN Partnering

Scalable Bastion Service

Azure Backup Archive Tier Preview

Azure Private Marketplace GA

Azure Resource Mover GA

Azure Firewall Premium Preview

Azure Disks Performance Tiers

Collab

Marco Scheel

https://techcommunity.microsoft.com/t5/microsoft-teams-blog/what-s-new-in-microsoft-teams-microsoft-ignite-2021/ba-p/2118226

Meetings

Presenter View

Video Layouts

1k interactive Meetings

Microsoft Teams Connect

Shared Channels based on B2B

Teams Multi Geo

Safe Links for Teams

Operator Connect (Calling + Conferencing)

Low Data Mode

Teams + Azure Calling Services

SharePoint Governance Reports (Anonymous Sharing Links)

Security

Jan Geisbauer

Security Kram eben die Show notes liest eh keiner

Windows

Oliver Kieselbach

https://www.linkedin.com/in/oliver-kieselbach-a4a3409/

1 Application Reliability

2 Restart frequency

3 Productivity Score

Windows Update for Business improvements

4 Driver and Firmware update policies

5 Expediting Quality Updates

6 Known Issue Rollback (KIR)

Delivery Optimization

7 Cloud-based congestion detection -> prevent download storm -> service elects someone and then this device can be the super spreader

client min. 2004 -> cloud -> later this year

8 Settings Catalog

9 Defender + Tunnel App combined

10 Setup Assistant iOS native MFA support -> henne ei trotzdem -> TAP

News

Das Ende ist Nahe - https://twitter.com/timpritlove/status/1362756062072422405?s=20

Pandemie Stay Alive Calls - https://mobile.twitter.com/vanhybrid/status/1358709192371154945

New file sharing in teams - https://m365admin.handsontek.net/new-file-sharing-experience-in-microsoft-teams/

Community Calls - https://developer.microsoft.com/en-us/office/blogs/microsoft-365-pnp-general-developer-sig-recording-18th-of-february-2021/

Microsoft Journal - https://www.microsoft.com/en-us/garage/blog/2021/02/an-ink-first-experience-with-journal-a-microsoft-garage-project/

Power Apps in Teams Milestones & Bulletins - https://techcommunity.microsoft.com/t5/microsoft-teams-blog/track-projects-and-share-news-in-teams-with-two-new-power-apps/ba-p/2118479

Dave Plummer - https://www.youtube.com/watch?v=f8VBOiPV-_M

TAP

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-temporary-access-pass

https://goodworkaround.com/2021/02/12/checking-out-the-new-azure-ad-temporary-access-pass-preview-feature/

Microsoft Viva

https://www.microsoft.com/en-us/microsoft-viva

Insights = MyAnalyics (früher Delve) + MyWorkplace Analytics (Böse in deutschland)

Topics = Project Cortex ist Knowlegde Management mit Tags, Wiki, etc

Connections = Ist quasi ein SharePoint Intranet das man auch in Teams einbinden kann (früher Home Site App)

Learning = "iframe" um alle möglichen Lernplatformen in Teams anzuzeigen (LinkedIn Learning)

News

- Emotet

- Solarwinds

- OWA KI

- SharePoint OneDrive merged admin center - https://techcommunity.microsoft.com/t5/- microsoft-onedrive-blog/bringing-onedrive-settings-into-sharepoint-admin-center-for/- ba-p/2054894

- Request data move 30.04.2021!!! - https://docs.microsoft.com/en-us/microsoft-365/- enterprise/request-your-data-move?view=o365-worldwide

- Clubhouse

- Apple macht jetzt Kopfhörer

- Neue Website - https://hairlessinthecloud.com

- Microsoft Security 10 Mrd: https://www.microsoft.com/security/blog/2021/01/27/- microsoft-surpasses-10-billion-in-security-business-revenue-more-than-40-percent-year-- over-year-growth/

- Teams WebHook - https://marcoscheel.de/post/2021/01/- 20210127-microsoftteams-webhookupdate/

- Unified Labels with SPO Sharing - https://docs.microsoft.com/en-us/microsoft-365/- compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide

Marco

- Automation PowerShell, CLI, …

- Teams, SharePoint, Azure AD, AZ, Microsoft Graph SDK, …

- https://marcoscheel.de/post/2021/01/20210124-m365teamsbackup-aadapp/

- https://pnp.github.io/powershell/articles/upgrading.html

Jan

- Privilege Escalation in AAD: https://emptydc.com/2020/12/10/privilege-escalation-in-azure-ad/

Zusammen mit GeekSprech spielen wir Hardcore TechTabu.

oliverkieselbach.com

Ragnar Heil (Channel Account Manager EMEA Central bei Quest)

https://twitter.com/ragnarh

https://ragnarheil.de/

https://ragnar.blog/

Wer ist Ragnar Heil?

Ignite Ankündigung „MS Stream New Vision“

- Zurück zu SharePoint

- Gut oder schlecht? Deine Meinung

Microsoft Stream basierte Events

- Team Live Events vs Stream Live Events

Event Setup

- Software

- Hardware

- Tipps & Tricks

Links

https://streamyard.com/

https://obsproject.com/de

https://techcommunity.microsoft.com/t5/microsoft-stream-blog/a-new-vision-for-microsoft-stream/ba-p/1686304