HNHacker News
TopNewBestAskShowJobs

gruberjl

5 karma · joined October 22, 2020

https://www.gitbit.org
submissionscomments
gruberjl··on Spain to ban social media access for under-16s, PM Sanchez says
I haven't set up my kids on social media. They haven't asked either. I do worry that banning kids from doing something makes it all the more intriguing to them when they are then allowed... Or makes the kids that lie and get on anyway "cool"

I do hope it works out, though. I think Social Media is one of the main reasons for depression.

gruberjl··on Enable Conditional Access policies to block legacy authentication
Today, most compromising sign-in attempts come from legacy authentication. Older office clients such as Office 2010 don’t support modern authentication and use legacy protocols such as IMAP, SMTP, and POP3. Legacy authentication does not support multifactor authentication (MFA). Even if an MFA policy is configured in your environment, bad actors can bypass these enforcements through legacy protocols.
gruberjl··on [dead]
1. Microsoft 365 security administrator 2. Security analyst 3. Penetration tester 4. Security Engineer 5. Information security manager 6. Network security administrator 7. Cybersecurity consultant 8. Incident responder 9. Security Architect 10. Security Operations Center (SOC) Analyst 11. Forensics Analyst 12. Malware Analyst 13. Threat Intelligence Analyst 14. Cloud Security Engineer 15. Cybercrime Investigator 16. Compliance Analyst 17. Identity and Access Management (IAM) analyst 18. Security Sales Engineer 19. Security Researcher 20. Cyber Intelligence Analyst 21. Vulnerability Management Analyst 22. Cybersecurity Project Manager 23. Cybersecurity Risk Manager 24. Security Automation Engineer 25. Data Loss Prevention (DLP) Engineer 26. Cybersecurity Legal Counsel
gruberjl··on [dead]
Microsoft Defender for Endpoint is an endpoint security solution developed by Microsoft. It is part of the Microsoft 365 suite of tools and supplies real-time protection against malware, ransomware, and other threats on endpoints, such as PCs, laptops, and servers.

Defender for Endpoint leverages Microsoft's Threat Intelligence service, which is continuously updated with new intelligence and machine learning algorithms, to supply up to date information on the latest threats and how to protect against them. It also includes a range of tools and features to help organizations investigate and respond to threats, including the ability to view and analyze alerts, investigate suspicious files and processes, and take remediation actions.

Defender for Endpoint is managed and monitored through the Microsoft Defender Admin Center, which is a cloud-based portal that supplies additional visibility and insights into an organization's security posture. Defender for Endpoint can also be deployed and configured through Intune using the Microsoft Endpoint Admin Center.

Overall, Defender for Endpoint supplies a comprehensive endpoint security solution that helps organizations protect their endpoints against threats and maintain a secure environment.

gruberjl··on [dead]
With the news that Chinese Hackers are using 42,000 domains in a huge phishing campaign I have been getting asked a lot: What does it take to send out a phishing campaign? So I wrote a guide (with a few pieces left out): How to send a great phishing campaign
gruberjl··on [dead]
Get started today with a free training. Get the lessons, hands-on guides, and practice tests you need to pass the Microsoft 365 security administrator certificate.
gruberjl··on Few Wordle Players Use Consistent Starting Words, but When They Do, It’s Adieu
People are really fascinated with this game. I've never tried. I stink at scrabble and the like.
gruberjl··on Microsoft Decides to Drop the Linux App for Teams
I think we'll start to see more and more Progressive Web Apps (PWA) in the future.
gruberjl··on Google to run ads “educating” users about “fake news”
Well it's a start but what about not showing fake news in the first place? Or blocking ads from sites that post fake news?
gruberjl··on The Paradox of ‘Good’ Teaching
"The teachers and the teaching practices that can increase test scores often are not the same as those that improve student-reported engagement" Love that.

Teachers have a tough job. Best of luck to all of them!

gruberjl··on Is Zero Trust worth the hype?
Zero trust. Because any less is impossible!
gruberjl··on Brain cap appears to boost memory for at least 1 month
More than long enough to pass an exam!
gruberjl··on iRobot’s Roomba will soon be owned by Amazon, which raises privacy questions
Amazon already knows exactly what I buy, now they'll know my home layout!
gruberjl··on Wet/Dry Vacuum Buying Guide (2019)
More than I'll ever need to know about vacuums. Next time my wife has a question I may be able to answer.
gruberjl··on The list of modules that help me in many disparate (and desperate) cases
Great list. Thanks for sharing!
gruberjl··on Microsoft Edge's SmartScreen is flagging ProtonMail's website as malicious
I doubt it was intentional for political / sales reasons. Edge probably scanned ProtonMail websites and found some malicious attachments and accidently started blocking ProtonMail because of it.
gruberjl··on Sheryl Sandberg officially steps down as COO of Meta
I thought I heard that a while ago and then I read the article "Sandberg first announced that she was leaving her role as COO of Meta after 14 years in early June."
gruberjl··on Bumblebees kept in isolation make up for it by being more social later
It's always fascinating to see social interactions in animals.
gruberjl··on How the world's biggest four-day workweek trial run changed people's lives
I'd be down for a 4 day work week!
gruberjl··on [dead]
Trouble managing on-premises users and Microsoft 365 users? Sync them with AD Connect.
gruberjl··on [dead]
Instead of granting all your admins admin roles that they have all the time you can grant users just-in-time (JIT) administration. With JIT you can have your admins request the access they need. The access can be time-limited so the admin can request the permissions they require to perform a function and then those permissions will automatically disappear after a short while. Just-in-time administration is part of Privileged Identity Management (PIM). With PIM you can monitor access to important resources in your organization.
gruberjl··on [dead]
Learn about the roles in Microsoft 365. Learn the permissions assigned to roles in Microsoft 365. Learn the basics of roles that you will need to know to pass the MS-500
gruberjl··on [dead]
So let's talk quickly about creating users in Microsoft 365. Every user in your organization that requires a mailbox or admin role will be required to have a user account. The easiest way to add a user account is by creating a single user account in Microsoft 365. What you'll learn * Add a single user account in Microsoft 365 admin center * Add a lot of users at one time using a CSV * Add a single user to Office 365 using PowerShell * How to view and edit Microsoft 365 users
gruberjl··on [dead]
What's PowerShell? The best way to explain PowerShell is directly from Microsoft:

PowerShell is a cross-platform task automation solution made up of a command-line shell, a scripting language, and a configuration management framework. PowerShell runs on Windows, Linux, and macOS. To put it another way, PowerShell is a command-line + a scripting language combined. It's a powerful tool that can be used to automate actions on your computer as well as actions in Microsoft 365. But it doesn't manage Microsoft 365 out of the box. You first have to extend it which can be done using modules.

gruberjl··on [dead]
Microsoft 365 management is broken down into multiple admin centers. An admin center is a website used to manage part of the tenant. For example, there's an Exchange Online admin center that can help you manage the email portion of your Microsoft 365 tenant. Another SharePoint Online admin center to help manage the SharePoint Online part of your tenant.
gruberjl··on GitBit Is Launched
GitBit is launched!

Get Certified in MS-500 Microsoft 365 Security Administration with our free lessons and practice questions. Learn everything you need to receive your MS-500!

Go to https://www.gitbit.org to get started.

gruberjl··on What's in This Course?
Welcome to the MS-500 course on GitBit! In this course, you'll learn everything you need to know to pass the MS-500: Microsoft 365 Security Administration. You'll also learn everything you need to know to secure your Office 365 tenant. Throughout this course, we'll be doing a ton of lectures and a ton of hands-on. For a hands-on experience, we'll be using a free Microsoft 365 tenant.

What's in the MS-500 The MS-500: Microsoft 365 Security Administration is a 40-60 question exam that includes multiple-choice, drag and drop, as well as, hands-on labs. It covers a wide variety of security and administration topics on Microsoft 365.

Here's a quick break-down from Microsoft on what's covered in the MS-500:

Implement and manage identity and access (35-40%) Secure Microsoft 365 hybrid environments Secure Identities Implement authentication methods Implement conditional access Implement roles and role groups Configure and manage identity governance Implement Azure AD Identity Protection Implement and manage threat protection (25-30%) Implement and manage Microsoft Defender for Identity Implement device threat protection Implement and manage device and application protection Implement and manage Microsoft Defender for Office 365 Monitor Microsoft 365 Security with Azure Sentinel Implement and manage Microsoft Cloud App Security Implement and manage information protection (10-15%) Manage sensitive information Manage Data Loss Prevention (DLP) Manage data governance and retention Manage governance and compliance features in Microsoft 365 (20-25%) Configure and analyze security reporting Manage and analyze audit logs and reports Discover and respond to compliance queries in Microsoft 365 Manage regulatory compliance Manage insider risk solutions in Microsoft 365

gruberjl··on How to Make Microsoft Lists Work for You
How I created a content scheduler to track my publishing and writing directly in Microsoft Lists