Heading to Buenos Aires, wish me luck 😬

Perfect luggage weight for the #EkoParty!

One of the best sessions I've seen for years! A deep-dive to Entra architecture, high availability, etc. 🤯 Must see for all Entra enthusiasts!

You know you want to speak at Disobey 2026. And now is your chance to do that! Our CfP is open at: cfp.disobey.fi/disobey-2026/ Check the guidelines from the link and send your proposal by Sep 30th!

Checking pre-vacation research notes..

Congratulations to all who renewed their Microsoft MVP status for the next year 🎉🔥

Updated to include RomHack: www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org romhack.io www.blackhat.com/sector/2025/

My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September! www.identitysummit.cloud orangecon.nl www.mcttp.de www.brucon.org www.blackhat.com/sector/2025/

Slides from my @wearetroopers.bsky.social talk are available at aadinternals.com/talks

nOAuth revisited by @ericonidentity.com at @wearetroopers.bsky.social

And so it begins.. First @wearetroopers.bsky.social conference day! I've got some rare #AADInternals challenge coins with me and this one goes to first one who asks for it

✅️ slide deck ✅️ demos ✅️ stickers ✅️ challenge coins ✅️ running shoes All ready for the TROOPERS 2025 @wearetroopers.bsky.social

New video: Had a cool run through with @lukasberancz into the kind of gaps DART identify commonly in incident response, then a deeper dive on hardware based credential providers like macOS Platform SSO. WATCH: youtu.be/qZV3IeWsRd0

Feeling confused..

Checked out the first gig of @durandurancom.bsky.social summer tour with wifey at Nokia Arena @tampere.fi 😎

The compulsory studies of my doctoral programme at University of Jyväskylä are now completed! Next step: dissertation 📘

Walking down the memory lane in Oxford 🇬🇧 with wifey. Ten years ago this day we became husband and wife ❤️

Ran this route in Oxford last time 10 years ago.

One clear sign of getting old is when your Inspector Morse pub crawl ends after the second stop 🥱

Getting ready for #TROOPERS 10k: Morning 🏃‍♂️‍➡️ around the Hyde Park!

Happy to share that my talk "The Ultimate Guide for Protecting Hybrid Identities in Entra ID" was accepted to #TROOPERS! troopers.de/troopers25/t...

Read about our progress on securing Microsoft in our Secure Future Initiative update:

Just pushed a new versions for #AADInternals and AADInternals-Endpoint modules! Some bug fixes plus support for: 1️⃣ Microsoft Authentication Library (MSAL) 2️⃣ Token Protection 3️⃣ Continuous Access Evaluation (CAE)

Due to recent events, I decided not to give any talks in the US until further notice. If you know any non-US conferences that has a CFP open, please let me know!

Back to reality 🥶

After spending two weeks in Miami and Caribbean cruise with the best company ❤️, I'm back in business!

Threat hunters rejoice! This is HUUUGE news 👏 Microsoft just introduced linkable identifiers in Microsoft Entra ID logs. The bad guys 🥷 are going to hate this so much 😂 Learn more at learn.microsoft.com/... Share the good news 👍

Finally, after 10 months and 25 days, I finished reading George R. R. Martin's "A Song of Ice and Fire" series just to learn that it's still missing a book (or two).

🛡️ We found a bug in restricted AUs that let accounts stay restricted (forever!) without an AU, preventing containment. Glad this is fixed now! More details here: securitylabs.datadoghq.com/articles/cre...

Changed my handle to @drazuread.com 🔥

👏 We just sent out this week's Entra newsletter. ⚠️ Note the important reminder on upgrading Entra Connect Sync before April 7. 👉 Read at entra.news/p/entra-n...

It is not always easy to get presentations accepted to cyber security industry conferences. As a scholar, I can assure it's the same with academic conferences! This time two reviewers gave 1/6 and one 5/6 😁

A bit boring morning run, but in new city!

This is just something you wouldn't want to see minutes before the departure 👀

My @disobeyfi.bsky.social talk is finally out! Link to video and slides available at aadinternals.com/talks And yes, @notmynick.bsky.social used some weird filter, I'm not that fat nor old 😜

sessionize.com/Live360_2025 Call for Speakers open!

We did a thing! DES (not even 3DES) has been a pain in our necks for years, but we couldn't remove it for compat reasons. It required special config to use so it's not dangerous out of the box, but it's still just...ugh, DES. Anyway, we said enough is enough and now the code is getting deleted.

First 10k run(ish) in two years!

Lineup for our @M365SandCUG tomorrow is mind blowing. Join us to learn a ton about securing Entra from some community legends. Register: www.meetup.com/m365s... (not recorded)

Pro tip for runners: Running in a blizzard is a nice way to avoid crowds! Cons: You may need to add wipers to your glasses..

As @ericazelic.bsky.social mentioned all the energy around Device Code abuse is long overdue. To get more info about how it’s done, these articles are relevant 2020 & 2022 respectively @drazuread.bsky.social aadinternals.com/post/phishing/ @inversecos www.inversecos.com/2022/12/how-...

As we heard earlier, there are no @disobeyfi.bsky.social badges this year. No worries, I'm doing a spring cleaning and will give away some of mine on Friday at Disobey! Some are just blingy-blingy-thingies, some really cool PCBs (like @defcon.bsky.social & TROOPERS badges).

🧳 It's time to get on board for the #PowerShell Conference Europe 2025. Find out more about the crew and their sessions! Don't forget your #PSConfEU ticket for Malmö! ✈️️▶ psconf.eu #Malmö #Skåne #Svenska #Sweden #IT #automation

Today marks my first anniversary at Microsoft!

My face looking OBS Studio crashing 😂

Check out this week's Entra newsletter. Featuring posts from @brianveldman.bsky.social, @damienbod.bsky.social, @danielbradley.bsky.social, @drazuread.bsky.social, @per-torben.bsky.social, @peter.inthecloud247.com, @rakhesh.com, @tonyredmond.bsky.social, @luke.geek.nz, @crh.bsky.social

Just pushed a small quality fix for #AADInternals: ▪ Added -Persistent switch to Get-AADIntESTSCookie to get ESTSAUTHPERSISTENT cookie ▪ Changed Search-AADIntUnifiedAuditLog to use access token

At this time of the year days are short and dark in Finland. If you want to see any daylight, better be out at noon when (if lucky) you might see the sun!

New #AADInternals version is finally out now: ▪ Moved endpoint related stuff to new module: AADInternals-Endpoints ▪ Added blue team stuff ▪ Added red team stuff See full change log at: aadinternals.com/aadinternals...

The end of the year is approaching! Notepad++ ❤