Category: Securing Infrastructure

Back to Basics: Identity Protection in Azure Active Directory

Identity Protection is a security feature in Azure Active Directory that helps to prevent, detect, and remediate identity risk in an organization. Using multiple detections, it monitors every login for identity compromise, sorting sign-ins into three categories of risk: low, medium, and high. These risk ratings can be used to create automated user risk policies […]

The tale of Enhanced Key (mis)Usage

Smart Card Logon In order to logon to the Windows system with a Smart Card, a specific user certificate needs to be present on it. There are different ways of mapping certificate to a particular user account in Active Directory and concrete requirements for such a certificate described in Smart Card Technical Reference document. One […]

8 Things to Avoid In Azure Active Directory

Protecting your digital treasure trove means avoiding those Azure AD misconfigurations that attackers are waiting to exploit. Use CQURE’s guide to detect and remedy some of the most common AD misconfiguration mistakes.

Back to Basics: Conditional Access in Azure Active Directory

In this beginner’s guide to conditional access in Azure Active Directory, Paula J shows how to regulate access by user, format and device type.

Back to Basics: Using PIM in Azure Active Directory Security

Paula J shows how to use Privileged Identity Management (PIM) in Azure Active Directory security to enforce just-in-time access and manage who has what roles.