Notices by Mark Morowczynski (markmorow@infosec.exchange)

@GossiTheDog

Sharing this post from earlier this week about NTLM. https://msrc.microsoft.com/blog/2024/12/mitigating-ntlm-relay-attacks-by-default/. You should NOT wait until you start moving to Server 2025 to start on this. The LDAP Channel Binding audit alert was back ported to all the way to Server 2019. Enable this, see what WILL break and start fixing! #infosec #activedirectory

After 9 years in #azuread / #EntraID CxE I've decided to take on a new role at #Microsoft. I'll be joining the Global Hunting, Oversight and Strategic Triage team, also known as GHOST as a security researcher. I'm excited for the change and very much up for the new challenges in this space. #infosec