MicrosoftCase in point on my last paragraph.
You've taken the advice of the Mimikatz Author to disable the Office vulnerability introduced by #follina. You've decided to block the "ms-msdt" driven diagnostics functionality.
How would this advice "Setup an AADJ’d PC for your environment and see what your experience is. Run through typical activities. What works? What doesn’t? Document your efforts and results then prioritize any gaps.", capture the absence of this setting as a gap? Because if you do not capture it, unless I am mistaken, you're reintroducing the vulnerability by following this methodology.
