Microsoft Security

Alles zu Microsoft Cloud Security: Identity und Access mit Microsoft Entra, Global Secure Access, Microsoft 365 Security und Azure Governance, aus der Praxis erklärt.

Hier starten

Microsoft Cloud Security: Top 10 low-hanging fruitsMicrosoft cloud security top 10 quick wins: MFA, updates, endpoint protection, RBAC, Conditional Access and more low-hanging fruits.Oceanleaf · Niklas Tinner

Get Started with Microsoft Cloud in 2026How to get started with Microsoft Cloud in 2026: a learning roadmap across technology areas, how to choose your focus and which events to attend.Oceanleaf · Niklas Tinner

Top 10 Entra & Intune Security TipsTop Microsoft Entra and Intune security tips: overlooked defaults like compliance settings and practical hardening steps for your tenant.Oceanleaf · Niklas Tinner

Key takeaways from the Microsoft Digital Defense Report 2024Microsoft Digital Defense Report 2024 key takeaways: social factors, emerging threats, cybercrime, threat actors, AI in cybersecurity and attack methods.Oceanleaf · Niklas Tinner

Microsoft security conceptsMicrosoft cloud security concepts at a glance: how to secure identities, devices, apps, data and infrastructure with Microsoft 365 and Azure.Oceanleaf · Niklas Tinner

Identity und Access Management mit Microsoft Entra

Conditional Access

Conditional Access - The ultimate starter guideConditional Access starter guide for Microsoft Entra ID: core concepts, a baseline policy set, additional recommendations and field notes.Oceanleaf · Niklas Tinner

Advanced Conditional AccessAdvanced Conditional Access in Microsoft Entra ID: protected actions, authentication contexts and combining Conditional Access with PIM.Oceanleaf · Niklas Tinner

Authentication und privilegierter Zugriff

Entra Authentication OverviewMicrosoft Entra authentication overview: authentication methods, MFA and passwordless options, use cases and security recommendations.Oceanleaf · Niklas Tinner

Privileged Identity Management (PIM) concept + setupMicrosoft Entra Privileged Identity Management (PIM) concept and setup: role sources, assignment types, PIM for groups, audit logs and governance.Oceanleaf · Niklas Tinner

Entra ID Password Protection (Hybrid)Microsoft Entra Password Protection for hybrid Active Directory: why banned password lists matter, how to install the DC agent and use audit mode.Oceanleaf · Niklas Tinner

The way from ADFS to Entra ID managed authenticationMigrate from AD FS to Microsoft Entra ID managed authentication: concepts, technical steps, risks, rollback and decommissioning your AD FS servers.Oceanleaf · Niklas Tinner

Externe Identitäten und Applikationen

Entra B2B & External ID DiscoveryMicrosoft Entra B2B and External ID: workforce vs. external tenants, collaboration use cases, best practices and setup for guest access.Oceanleaf · Niklas Tinner

Understanding identity federation and application management in Entra IDIdentity federation in Microsoft Entra ID explained: enterprise applications vs. app registrations, consent and how SaaS apps connect to your tenant.Oceanleaf · Niklas Tinner

Monitoring

Logs & Monitoring in Entra IDMonitor Microsoft Entra ID with logs and workbooks: sign-ins, MFA, Conditional Access and Identity Protection insights, and what to do with the data.Oceanleaf · Niklas Tinner

Global Secure Access

Introduction to Microsoft Global Secure Access (GSA)Microsoft Global Secure Access (GSA) introduction: Entra Internet Access and Private Access concepts, setup, prerequisites and first steps.Oceanleaf · Niklas Tinner

Secure macOS Intune Deployment with Defender and Global Secure AccessSecure macOS deployment with Intune, Defender for Endpoint and Global Secure Access: configuration steps for a protected Mac in the enterprise.Oceanleaf · Niklas Tinner

Global Secure Access Unified Monitoring & LoggingGlobal Secure Access monitoring and logging: portal views, KQL queries, Log Analytics tables and a community Azure Workbook for unified insights.Oceanleaf · Niklas Tinner

Microsoft 365 Security

Security Reports in M365Build scheduled security reports from the Microsoft Defender portal: report types, vulnerability management data and a management report outline.Oceanleaf · Niklas Tinner

Microsoft 365 Cloud Security correlationHow Microsoft 365 security correlates signals across Defender, Entra ID and Intune, with incident examples and Microsoft Graph query samples.Oceanleaf · Niklas Tinner

Launch with Microsoft 365: a guideSet up a Microsoft 365 tenant step by step: licenses, custom domains, SharePoint, Teams, Exchange, MFA, privileged roles and self-service password reset.Oceanleaf · Niklas Tinner

DefenderMicrosoft Defender guides: Defender for Endpoint, Identity, Office 365 and Cloud Apps, with configuration, security settings management and field experience.Oceanleaf · Niklas Tinner

Azure Governance und Monitoring

My Azure Governance guidebookAzure governance guidebook: data location, naming conventions, management groups, RBAC, budgets, tags and Azure Policy best practices.Oceanleaf · Niklas Tinner

Azure Managed Identity - access to Graph API and Azure resourcesAzure Managed Identity for Microsoft Graph and Azure resources: assign API permissions and authenticate runbooks without storing any secrets.Oceanleaf · Niklas Tinner

Log analytics: the basicsAzure Log Analytics basics: what a workspace is for, how log collection works and how to analyze Microsoft Entra ID and Intune data with KQL.Oceanleaf · Niklas Tinner