11 weeks until the Secure Boot KEK CA certificate expires. The first Speed Date workshop sold out - so I am running Round 2 on April 16. docs.kaidojarvemets.com/training/sec... #SecureBoot #Workshop #UEFI

The Secure Boot 2026 update is not one step. It is four. Every Windows device. Four stages. Two deadlines. 11 weeks to the first one. April 16 workshop - 3 seats left: docs.kaidojarvemets.com/training/sec... #Windows #SecureBoot #Security #Microsoft

Happy Monday! 🙂 My new Azure Arc for Servers article is now published. docs.kaidojarvemets.com/azure-arc-fo... #Azure #AzureArc

For your reading pleasure. www.reddit.com/r/Intune/com...

Welp— Meta Platforms has donated $1 million to president-elect Donald Trump’s inaugural fund, the latest step by CEO Mark Zuckerberg to bolster his once-fraught relationship with the incoming president. www.wsj.com/tech/mark-zu...

Animals with sharp objects 🔪🔪🔪 #art

Firewall misconfigurations = risk. How are you monitoring your firewall rules today? No centralized system? Missed alerts? Time wasted? We’ve got the fix: A complete Windows Firewall Monitoring Solution for Sentinel & Azure Arc. Get visibility. Get secure. kaidojarvemets.com/your-firewal...

The safe way to leave Twitter. lifehacker.com/dont-delete-...

Windows Firewall Monitoring Solution almost documented. Hopefully, I can publish it tomorrow

There's always a good side in almost anything. For instance, we're having cold blackouts again because of Russians. It's the 3rd winter that they have tried to strip us of electricity and heating. But. It's just the time to unwrap the telescope and fly across the universe all night long.

So who wants a verified 'Microsoft' and 'Microsoft MVP' label on their profile and all the posts? I just finished setting up @bluesky.ms as a labelling service. Go subscribe to the label to start seeing labels on verified MVPs and Microsofties. 🧵👇

Two new pages done!

Social networks are about trust, but how can you trust a profile, especially if it doesn't have a ton of followers? I built a little tool with the idea to verify Bluesky users on a trustworthy source, the first supported being the Microsoft #MVP website. Check verified-bluesky-rpu7w3bv.fermyon.app

Will add Event ID Tracking to my Sentinel Windows Firewall Workbook as well. Will publish the complete package for my Premium Members.

When your cybersecurity plan is just an Excel sheet... 🛡️📊 #ExcelWarrior

Company Security’ – fortified by... Excel? The invincible wall of checkboxes! 😂

I was going to threaten that if I’m not at 100,000 followers in seven days the world would end, but I realize a more effective threat would be that it won’t.

Simplify Windows Firewall rule audits with Sentinel! 🚀 Gain visibility into enabled/disabled rules, actions, protocols, and top apps—all in one dashboard. Enhance compliance, identify gaps, and optimize configurations at scale. #MicrosoftSentinel #AzureSecurity

Made my first-ever mac and cheese from scratch! Creamy, cheesy, and topped with a golden, crispy panko layer. Definitely worth the effort!

Working on my Master's thesis.

Take you Active Directory delegations data to Sentinel. You can visualize and analyze all your delegations. #Microsoft #ActiveDirectory #Automation #MicrosoftSentinel kaidojarvemets.com/strengthen-y...

So did all these news orgs just schedule these pieces for *after* the election or what

His insane nominations... His promises to deploy the military on home soil... His threats to go after anyone who opposes him... Now, there are messages going out to specific communities threatening deportation and "re-education camps". It's by design. His objective is to fill you with fear ...

📊 Launching: Complete visibility into your Entra ID authentication methods New Workbook for Microsoft Sentinel helps security teams: - Track MFA adoption - Identify security gaps - Monitor compliance - Support Conditional Access Real data & Real insights kaidojarvemets.com/entra-id-aut...

📋 Export Azure Policy Initiative to CSV - Get a snapshot of CIS Azure Benchmark 2.0.0 using PowerShell. #Azure #Automation kaidojarvemets.com/export-cis-a...

Second tool for Conditional Access is almost ready! 🚀 Now I can do direct assessments of CA rules and analyze user behavior based on SignIn logs. This means I can provide a full 360-degree overview of Conditional Access coverage and effectiveness. #AzureSecurity #EntraID #ConditionalAccess

Soon I have two Conditional Access Assessment tools: one for direct CA assessments and the other based on user sign-in logs. I can target specific users or Entra ID roles to see Conditional Access coverage in detail. Scan, assess, and ensure the right protection

Today, I need to complete the data verification cycle to ensure the accuracy of both the displayed data and all associated figures. I've also built some additional reports to make it easier to understand the origins of the Conditional Access CAPs. #MicrosoftEntra #ConditionalAccess

A separate user account with 'Global Administrator' rights has logged over 10,000 sign-in events in the past 14 days. This is something I did not expect.

That's bad -- as Richard Hicks pointed out on "the other place," the KDC Proxy is enabled by default when you set up Direct Access, and when using Direct Access that is directly exposed to the internet. So patch now...

First version of the Entra Conditional Access Assessment tool is ready for the Private Preview Program! Early customers have already signed up, and I'm eager to see how this shapes our understanding of CA rules in action. Ready to bring real visibility to Conditional Access effectiveness.

Microsoft removed the Webhooks from Teams, and now there's no straightforward way to post messages or adaptive cards without using a service account. This is not OK.

I built an Entra ID Authentication Methods Dashboard and data harvester for Sentinel. If you haven’t analyzed your users' authentication methods, you're missing out - kaidojarvemets.com/entra-id-aut...

🔍 Need to audit Entra ID roles? - Get-MgRoleManagementDirectoryRoleDefinition lists all roles - Get-MgRoleManagementDirectoryRoleAssignment shows who has them. Two cmdlets, zero portal clicking.

I updated my post about how to get all Entra ID Roles and included a simple example: kaidojarvemets.com/azure-active... #MicrosoftEntra

Stop focusing on Excel sheets of CA rules in Entra ID. Built a PowerShell toolkit that shows what's actually happening: real usage, policy triggers, protection rates, devices & locations. Started as CA audit tool, turned into practical DFIR solution. #EntraID #Security #DFIR