Browse by topic
Identity
Identity and access security, including Microsoft Entra ID account lifecycle and admin role audits, a location-based MFA policy that turned out to be something else, and AI agents as privileged identities.
3 posts
-
3 min read
Auditing Entra ID Accounts and Privileges Without PowerShell Dependencies
Entra ID audit automation: cross-reference accounts against onboarding and offboarding tickets and verify AI Administrator and Security Administrator roles.
- Identity
- Security Automation
-
5 min read
Your AI agent is the most over-privileged account you own
An AI agent often gets full shell, your API keys and network on day one. Six least-privilege rules to contain prompt injection and shrink the blast radius.
- AI Security
- Identity
-
7 min read
We thought we had location-based MFA. We had something else entirely
Location-based MFA audit in Entra ID Conditional Access: no location policies existed, legacy per-user MFA was doing the prompting, and how to migrate safely.
- Identity
- Security Engineering