Cybersecurity Month Tech Community Giveaway!
Hey everyone! October is Cybersecurity Month and we wanted to celebrate by giving away some awesome Microsoft Swag to 20 lucky Tech Community members as a thank you for supporting this community. All you must do to enter is share our registration link to your favorite social media platform (Twitter, LinkedIn, Reddit, etc), take a screenshot and post down below for proof, and send an email with the screenshot of your post to bweenig@microsoft.com. At the end of October, we will be selecting 20 responders at random to receive some exclusive Microsoft swag. Good luck and thanks again!Want to earn an Exclusive Security Tech Community Badge? Take our quick survey!
Hey there Security Tech Community! As we prepare for Microsoft Ignite, we’re building a focused, practitioner-led security roundtable and we want your input to ensure it reflects the most relevant and pressing topics in the field. We invite you to take a short survey and share the security topics, trends, and technical questions you want to see covered. Your input will directly influence the structure and substance of the Ignite Security Roundtable. The first 5 people to post a screenshot for proof of survey completion in the comments below will receive this "Microsoft Security Star" Badge to add to their Tech Community profile! TAKE THE SURVEY NOW: https://aka.ms/IgniteSecurityRoundtableSurvey2025Microsoft Ignite 2019 Security Announcements Summary!
If you didn't have time to watch all the security sessions from Microsoft Ignite, this article is for you! During Microsoft Ignite 2019, there were plenty of security and compliance sessions. Cyril has prepared a 72-slides summary of the most interesting security and compliance announcements. Link to the article and deck. Hope you enjoy it! Thank you Cyril Voisin for sharing your summary!New Series Coming Soon: The Security Experts Roundtable on January 25th!
Hey all! Come check out our newest series coming to Microsoft Security on January 25th! There is a lack of security content that covers timely, newsworthy topics, that is both educational and engaging. After all, we all spend a lot of time in learning mode. Why can’t it be fun? If you’ve ever wondered what your fellow security colleagues think about the latest vulnerabilities, security news, and emerging trends, look no further. The Security Experts Roundtable launches on January 25th to deliver the webinar series of your dreams. The first webinar will air at 10 AM PST and will cover intriguing segments on: Top threats we saw over the holidays (and what you need to know) How you benefit from the Microsoft Digital Crimes Unit Avoiding phishing lures and brand abuse Advise on communicating to your Board of Directors Real-world IoT risks There is also a video down below with all the details! REGISTER NOW: https://aka.ms/SecurityExpertsRoundTable
Copilot Studio Auditing
Hey team, While I'm doing research around copilot studio audting and logging, I did noticed few descripencies. This is an arcticle that descibes audting in Microsoft copilot. https://learn.microsoft.com/en-us/microsoft-copilot-studio/admin-logging-copilot-studio?utm_source=chatgpt.com I did few simualtions on copilot studio in my test tenant, I don't see few operations generated which are mentioned in the article. For Example: For updating authentication details, it generated "BotUpdateOperation-BotIconUpdate" event. Ideally it should have generated "BotUpdateOperation-BotAuthUpdate" I did expected different operations for Instructions, tools and knowledge update, I believe all these are currently covered under "BotComponentUpdate". Any security experts suggestion/thoughts on this?Join us on December 3rd for our Post-Ignite Security Tech Community Live!
Ask us anything about simplified, end-to-end, AI-driven protection with Microsoft Security! Visit https://aka.ms/TCL/Security to see more details and view all the session pages! Catch up on the latest security product innovations at Microsoft Ignite, then join us to get answers to your questions. Engineering and product teams will answering live, providing insights on camera and in chat. Post early, post often. We're here to help! The event will start at 7:00AM PST on December 3rd, see you there! I'm in! How do I sign up? There's no registration necessary. Just visit https://aka.ms/TCL/Security, then select Attend on the session pages that catch your eye. Each AMA page also features a helpful link to add that session to your calendar! What if I can't attend live? While this is a live event, all sessions will be recorded and available on demand after we conclude. Visit the session pages and post your questions in advance so you can get the answers you need.We need your help deciding our next Security AMA topic!
We want YOU to decide what our AMA topic should be for an upcoming Microsoft Secure Tech Accelerator AMA session. Please visit the link below and answer a few questions that will help us pick! Thank you! https://aka.ms/TechAcceleratorAMATopicSurvey
Detect Microsoft Support Activity in Tenant (No Customer Lock Box)
Hi everyone, I am currently working with a customer on a detection to track Microsoft Support Case activities in the customers tenant. The customer is currently checking the M365 Audit Log for certain matches on the "UserId" attribute. UserId=*@microsoft.com OR UserId="BoxServiceAccount" OR UserId="Microsoft Operator" The key value pairs were provided by Microsoft! Now they had an active case and access to the tenant last week, but could not find anything in the audit log. Support personell used an *@office365support.com domain account for access. Adding domains to the detection might not be the smartest (convenient) solution... Is there just no entry in the M365 Audit Log if "Customer Key" is not licensed? From the MSFT-Docs i can find a quiet similar query to use when Customer Key is enabled. https://docs.microsoft.com/en-us/microsoft-365/compliance/customer-lockbox-requests?view=o365-worldwide#search-the-audit-log-for-activity-related-to-customer-lockbox-requests Thanks / Regards JohnTech Events
Hey all! With Build 2022 happening right now and RSA 2022 just around the corner, I was wondering how many of you have been to any in-person events, especially those tailored around Security. I know it's been a while (Thanks COVID) but I'm excited that they are coming back at least in a hybrid manner to start! Did you enjoy it? Were you able to gain any valuable insights for your field of work? Please share your experiences below!
