Mark @IntNull0

Dad, InfoSec nerd, US Army veteran Tampa Joined February 2011

Tweets

3K
Followers

264
Following

1K
Likes

1K

Nathan McNulty @NathanMcNulty

2 days ago

Please stop using Private browser sessions for cloud admin accounts Look, we all know we shouldn't be using admin accounts while signed into our productivity account, but if you're gonna do it, at least use browser profiles so you can enforce compliance learn.microsoft.com/en-us/entra/id…

27 72 412 34K 300

Download Image

📔 Michael Grafnetter @MGrafnetter

15 hours ago

Fact: Remote service and scheduled task creation bypass firewalls on DCs and Win file servers because of SMB tunnelling. Solution: Create RPC filters that block MS-SCMR and MS-TSCH over named pipes. The latter has 3 UUIDs, so blocking the atsvc pipe is more elegant. #DSInternals

0 23 133 10K 83

Download Image

Zack Korman @ZackKorman

2 days ago

Here’s a thread about how I approached getting ISO27001 certified at Pistachio, written for people who hate these things as much as I do. As @IceSolst says, ACAB includes auditors.

12 18 96 13K 160

EZ @IAMERICAbooted

4 days ago

💯 learn.microsoft.com/en-us/windows/… Another thing to be aware of since every shield is also a sword: If an attacker sends you an encrypted message/attachment with Information Protection, your mail security solutions will not prevent malicious QR codes, links, or downloads. It is…

Nathan McNulty @NathanMcNulty

5 days ago

4 19 136 23K 129

Download Image

3 11 73 9K 59

Merill Fernando @merill

5 days ago

Your CISO sends you a Microsoft Teams invite for an "urgent" meeting. You join. What happens next is a hacker's dream. In this clip from the latest Entra Chat episode, @IAMERICAbooted breaks down a terrifyingly effective phishing technique happening right inside Teams.…

6 36 164 16K 130

Download Video

Tanya Janca | Shehackspurple @shehackspurple

a week ago

I love the joke O'Reilly covers! Do you have any to share?

35 72 659 34K 123

Download Image

Shodan @shodanhq

3 weeks ago

Want to ping an IP from multiple places around the world or see if the hostname uses geolocation-based load balancing? Check out our "geoping" and "geodns" tools that are powered by our GeoNet API: geonet.shodan.io

1 63 346 24K 201

Speaker 25 @rodtrent

3 weeks ago

From Shadows to Signals: Hunting Pass-the-Hash Attacks - In.security in.security/2025/09/08/fro… #MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #DefenderXDR

1 11 38 2K 17

Speaker 25 @rodtrent

3 weeks ago

Microsoft Sentinel’s AI-driven UEBA ushers in the next era of behavioral analytics techcommunity.microsoft.com/blog/microsoft… #MicrosoftSentinel #Cybersecurity #MicrosoftSecurity #Security #DefenderXDR

1 5 13 925 6

Tom Wechsler - Microsoft Azure & CDM MVP @tomvideo2brain

3 weeks ago

Microsoft Cloud Security: Microsoft Entra ID Continuous access evaluation and how it works! @Microsoft @merill @MSTCommunity @github @TelerikFiddler @msftsecurity #Microsoft #MicrosoftGraph #EntraID #mvpbuzz #PowerShell #Fiddler #coolstuff 👇👇👇👇 techcommunity.microsoft.com/t5/microsoft-e…

0 12 63 3K 55

EZ @IAMERICAbooted

3 weeks ago

Really nice diagram here on how SIF and PRT work from user devices.

Xenoulis @Xenoulis1

2 months ago

Really nice diagram here on how SIF and PRT work from user devices.

2 7 38 6K 41

Download Image

1 9 57 5K 47

Speaker 25 @rodtrent

3 weeks ago

I’m so excited to share something special: Rod’s Fiction Universe! Join me at rodsfictionbooks.substack.com/p/welcome-to-r… to explore my current books and get first access to future stories.

0 1 2 660 0

Download Image

Kaido Järvemets @kaidja

3 weeks ago

Microsoft Defender XDR Security Settings Management - Complete Implementation Guide with Azure Arc Integration and Sentinel Monitoring Read more - docs.kaidojarvemets.com/defender-xdr-s… #Azure #DefenderXDR #AzureHybrid #AzureArc #MicrosoftSentinel #Microsoft #MicrosoftMVP

1 31 110 9K 130

Download Image

YungBinary @YungBinary

4 weeks ago

Malware sandbox bypass and Windows Defender exclusion PoC! I made it after discovering a simple yet effective technique being used by a loader in the wild dropping what we are calling #NightshadeC2 (blog coming soon!) PoC -> github.com/eSentire/iocs/… youtube.com/watch?v=_0-IMM…

1 51 163 17K 93

JS0N Haddix @Jhaddix

3 weeks ago

New Executive Offense Newsletter - Building AI Hackbots, Hard-Earned Lessons Pt 1 (and course giveaway) executiveoffense.beehiiv.com/p/ai-hackbots-… Giveaway: Retweet this post and be entered to win a seat in Q4s courses! ("Red Blue Purple AI" or "Attacking AI") Three winners will be chosen next…

23 192 285 22K 162

ALI TAJRAN @alitajran

3 weeks ago

Remove the Outlook Report Button if you use a third-party phishing tool! Many organizations use a third-party phishing tool to help users quickly report suspicious emails in Outlook. This is excellent to keep the IT team informed and ahead of potential threats. However, if both…

4 10 109 12K 149

Download Image

Speaker 25 @rodtrent

4 weeks ago

Custom detection rules get a boost—explore what’s new in Microsoft Defender techcommunity.microsoft.com/blog/microsoft… #MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence

1 12 34 2K 25

John Savill @NTFAQGuy

4 weeks ago

Microsoft have released a great (free) Zero Trust Workshop that helps organizations with an actionable roadmap to achieving zero trust in their organization. youtu.be/xVWr1ml47_g aka.ms/ztworkshop 00:00 - Introduction 00:07 - Zero Trust 101 00:22 - NIST zero trust…

5 90 438 38K 705

Sami Laiho @samilaiho

4 weeks ago

Planning for mandatory multifactor authentication for Azure and other admin portals learn.microsoft.com/en-us/entra/id…

1 11 40 2K 15

Simon Skotheimsvik | MVP @SSkotheimsvik

4 weeks ago

💡 Intune admins: Autopilot devices can silently fail compliance due to the “Enrolled User Exists” policy. If IT enrolls instead of the user, CA policy may block. I break it down + how to detect it with PowerShell in my latest blog. skotheimsvik.no/the-hidden-int… #Intune #Autopilot