Thomas Naunheim

EntraOps 1.1 is available with new features:

🏗️ Service EM
🚀 #AzureDevOps support
🔎 Privileged Assets + #Maester findings
🏷️ Flexible classification
📦 Standalone PowerShell module

Thanks to @MySnozzberries for his work on Service EM and Azure DevOps!
entraops.com

GA of service-to-service token binding is announced in Entra’s October “What’s new”. Initial release: #ManagedIdentities on #Azure Trusted Launch or Confidential VMs/VMSS, for KeyVault. Can’t wait for more supported scenarios for NHIs in #MicrosoftEntra:
techcommunity.microsoft.com/blog/microsoft…

I joined Dinant Paardenkooper on "AzSecurity - Learn by doing" to share the story behind #EntraOps including live demos: Classification Model, Classification Explorer & reporting integrations for a practical Enterprise Access Model in #MicrosoftEntra.
🎥 youtube.com/watch?v=KUyrlF…

🤔 Why should the AI Administrator role in #MicrosoftEntra be considered Control Plane (Tier 0)? At first glance, it might seem particularly privileged just to manage #AgentIdentities. But there's an aspect that often gets overlooked. (1/7) 👇

🤖 New chapter: #AgentIdentities in the Attack & Defense Playbook for #MicrosoftEntra is live!
🔗 github.com/Cloud-Architek…

Together with @samilamppu, @RobbeVdDaele, and @DerkvanDerWoude, I’ve been researching #AgentID foundations, attack scenarios, detections, and mitigations.