Microsoft product
GCS Technologies replaced point solutions with the Microsoft 365 security stack and built a practice around proactive improvement. Five lessons MSPs can borrow, from engagement model to pricing.
A stolen session token becomes a BEC campaign fast. This runbook walks the full cleanup, confirm, scope, evict, recover, with the exact portals, KQL queries, and PowerShell for each step.
A malicious OAuth app keeps mailbox access after every password reset. How attackers plant them in Microsoft 365, plus the consent lockdown and hunting runbook.
Exchange Online enforces tenant-wide outbound email limits, E5 Security arrives as a Business Premium add-on, and the Report Message add-in enters maintenance mode.
Shadow SaaS thrives where no approved software list exists. Build a vendor management policy, an inventory template, and use the three app inventories M365 already keeps.
Most businesses cannot produce an accurate application inventory, and the Microsoft 365 defaults make it worse. Here is the layered plan for CIS Control 2, from OAuth consent to ASR rules.
Microsoft-managed Conditional Access policies start auto-enforcing after 45 days, Skype interop in Teams dies May 1, and Hotpatch hits preview. The February 2025 changes, sorted by deadline.
Entra keeps sign-in logs for 30 days at most, 7 on the free tier. Here is how to stream them into a Log Analytics Workspace and keep up to two years of evidence, usually for pocket change.
Copilot Chat arrives free for Entra users, Teams flips transcription on by default for new tenants, and small businesses get live chat. The January 2025 M365 changes, sorted by what to check first.
Microsoft blocks 7,000 password attacks per second, yet only 41% of Entra sign-ins use MFA. The data behind the passwordless push, and an honest look at what the passkey experience is like today.
Users refuse enrollment, admins refuse open access. Intune app protection policies plus one Conditional Access rule protect Microsoft 365 data on personal phones without managing the device.
External collaborators do not need download rights to do their job. Two settings force guests into authenticated, browser-only access and block local downloads in SharePoint and OneDrive.
