Author: Vasil Michev

Latest Articles

Azure AD App Management Method Policies Harden Application Security Posture One comment

Azure AD App Management Method Policies Harden Application Security Posture

Still in public preview, new application authentication method policies will help Microsoft 365 customers adhere to best practices for managing application credentials, while asserting pressure on ISVs to do the same. Going forward we can expect this to turn into a standard configuration, enforced across many organizations. To address the problem, Microsoft is ready to release a set of features to help. In this article, we introduce you to Azure AD application authentication method policies, one of the features in the set.

September 22, 2021
Inventorying Permissions Assigned to Azure AD Apps 8 Comments

Inventorying Permissions Assigned to Azure AD Apps

Many apps are created in the Azure AD for a tenant. Those apps have permissions to allow them to access data, and consent for those permissions are granted by administrators and users. How often do you check what apps are known in your Azure AD and what permissions those apps have? In this article, we review how to use the Graph API and PowerShell to create a report inventorying apps and permissions. What you do with that data is up to you!

April 26, 2021
Why Microsoft 365 Audit Logs Lack Proper Fit and Finish 3 Comments

Why Microsoft 365 Audit Logs Lack Proper Fit and Finish

The audit events generated for license assignments to user accounts available in the Azure AD audit log and Office 365 audit log are inconsistent and incomplete. This is certainly true for licenses assigned to accounts through auto-claim policies and group-based licensing, but known gaps exist in the audit records generated in other areas of Office 365 and Microsoft 365 functionality. We think Microsoft needs to pay attention to ensure that auditing works consistently and predictably across all workloads. Once they improve the fit and finish of audit record generation, they can move into other areas, like charging for access to high-value audit events.

April 14, 2021
How to create a Communication compliance policy 3 Comments

How to create a Communication compliance policy

Back at Ignite 2019, Microsoft announced a few new compliance features under the Insider Risk Management “solution”. In this article, we’ll take a quick look at one of them – the Communication compliance feature. What is Communication compliance? Communication compliance is a set of controls designed to identify, collect, review and act upon offending instances […]

March 17, 2020