Microsoft Security
Everything on Microsoft cloud security: identity and access with Microsoft Entra, Global Secure Access, Microsoft 365 security and Azure governance, explained from the field.
Start here
Microsoft Cloud Security: Top 10 low-hanging fruits
Microsoft cloud security top 10 quick wins: MFA, updates, endpoint protection, RBAC, Conditional Access and more low-hanging fruits.
Niklas Tinner
Get Started with Microsoft Cloud in 2026
How to get started with Microsoft Cloud in 2026: a learning roadmap across technology areas, how to choose your focus and which events to attend.
Niklas Tinner
Top 10 Entra & Intune Security Tips
Top Microsoft Entra and Intune security tips: overlooked defaults like compliance settings and practical hardening steps for your tenant.
Niklas Tinner
Key takeaways from the Microsoft Digital Defense Report 2024
Microsoft Digital Defense Report 2024 key takeaways: social factors, emerging threats, cybercrime, threat actors, AI in cybersecurity and attack methods.
Niklas Tinner
Microsoft security concepts
Microsoft cloud security concepts at a glance: how to secure identities, devices, apps, data and infrastructure with Microsoft 365 and Azure.
Niklas Tinner
Identity and access management with Microsoft Entra
Conditional Access
Conditional Access - The ultimate starter guide
Conditional Access starter guide for Microsoft Entra ID: core concepts, a baseline policy set, additional recommendations and field notes.
Niklas Tinner
Advanced Conditional Access
Advanced Conditional Access in Microsoft Entra ID: protected actions, authentication contexts and combining Conditional Access with PIM.
Niklas Tinner
Authentication and privileged access
Entra Authentication Overview
Microsoft Entra authentication overview: authentication methods, MFA and passwordless options, use cases and security recommendations.
Niklas Tinner
Privileged Identity Management (PIM) concept + setup
Microsoft Entra Privileged Identity Management (PIM) concept and setup: role sources, assignment types, PIM for groups, audit logs and governance.
Niklas Tinner
Entra ID Password Protection (Hybrid)
Microsoft Entra Password Protection for hybrid Active Directory: why banned password lists matter, how to install the DC agent and use audit mode.
Niklas Tinner
The way from ADFS to Entra ID managed authentication
Migrate from AD FS to Microsoft Entra ID managed authentication: concepts, technical steps, risks, rollback and decommissioning your AD FS servers.
Niklas Tinner
External identities and applications
Entra B2B & External ID Discovery
Microsoft Entra B2B and External ID: workforce vs. external tenants, collaboration use cases, best practices and setup for guest access.
Niklas Tinner
Understanding identity federation and application management in Entra ID
Identity federation in Microsoft Entra ID explained: enterprise applications vs. app registrations, consent and how SaaS apps connect to your tenant.
Niklas Tinner
Monitoring
Logs & Monitoring in Entra ID
Monitor Microsoft Entra ID with logs and workbooks: sign-ins, MFA, Conditional Access and Identity Protection insights, and what to do with the data.
Niklas Tinner
Global Secure Access
Introduction to Microsoft Global Secure Access (GSA)
Microsoft Global Secure Access (GSA) introduction: Entra Internet Access and Private Access concepts, setup, prerequisites and first steps.
Niklas Tinner
Secure macOS Intune Deployment with Defender and Global Secure Access
Secure macOS deployment with Intune, Defender for Endpoint and Global Secure Access: configuration steps for a protected Mac in the enterprise.
Niklas Tinner
Global Secure Access Unified Monitoring & Logging
Global Secure Access monitoring and logging: portal views, KQL queries, Log Analytics tables and a community Azure Workbook for unified insights.
Niklas Tinner
Microsoft 365 security
Security Reports in M365
Build scheduled security reports from the Microsoft Defender portal: report types, vulnerability management data and a management report outline.
Niklas Tinner
Microsoft 365 Cloud Security correlation
How Microsoft 365 security correlates signals across Defender, Entra ID and Intune, with incident examples and Microsoft Graph query samples.
Niklas Tinner
Launch with Microsoft 365: a guide
Set up a Microsoft 365 tenant step by step: licenses, custom domains, SharePoint, Teams, Exchange, MFA, privileged roles and self-service password reset.
Niklas Tinner
Defender
Microsoft Defender guides: Defender for Endpoint, Identity, Office 365 and Cloud Apps, with configuration, security settings management and field experience.
Niklas Tinner
Azure governance and monitoring
My Azure Governance guidebook
Azure governance guidebook: data location, naming conventions, management groups, RBAC, budgets, tags and Azure Policy best practices.
Niklas Tinner
Azure Managed Identity - access to Graph API and Azure resources
Azure Managed Identity for Microsoft Graph and Azure resources: assign API permissions and authenticate runbooks without storing any secrets.
Niklas Tinner
Log analytics: the basics
Azure Log Analytics basics: what a workspace is for, how log collection works and how to analyze Microsoft Entra ID and Intune data with KQL.
Niklas Tinner