Legacy MFA settings in the Entra portal and how to control them programmatically

Did you know that the legacy MFA settings have been “ported” to the Entra Admin portal? Not only you can access and manage them therein, but you can also take advantage of this integration in order to enable programmatic access to said settings. Read the article to find out how! …

Continue readingLegacy MFA settings in the Entra portal and how to control them programmatically

Few notes on disabling access to PowerShell in Exchange Online

A question over at Experts Exchange prompted me to refresh my memory on the process of disabling access to PowerShell for Exchange Online users. The proper way to do that, as detailed by Tony in this article, is to toggle the corresponding flag on the user object. Microsoft is however …

Continue readingFew notes on disabling access to PowerShell in Exchange Online

First look at the analyzedEmails Graph API endpoint

Today’s article will be about the newly introduced /analyzedEmails Graph API endpoint, which in a nutshell is a lightweight Threat explorer implementation. While the new API fails to measure up to the robust tool that Threat explorer is, this is not to say it has no merit, as it does …

Continue readingFirst look at the analyzedEmails Graph API endpoint

“Sequence” events in the Entra Audit log and how to work with them

A question over at Q&A highlighted some changes in the way Microsoft is generating Entra audit log records for license operations. We have talked about issues surrounding this process a lot in the past, for example in this article over at Practical 365. Apart from missing entries, a common pain …

Continue reading“Sequence” events in the Entra Audit log and how to work with them