DEF CON 34 Workshop Materials Uploaded

Posted on 2026-08-21 in code • Tagged with article, DEFCON, DEFCON34, workshop, m365, bec, incident, response, investigation, powershell

The complete DEF CON 34 BEC workshop materials are now up on GitHub, along with a few small updates to the M365 IR scripts.


Continue reading

M365 BEC investigation easy as Cake

Posted on 2025-10-15 in code • Tagged with article, m365, bec, investigation, logs, incident, response, scripting

The best presentation on business email compromise investigation I've seen in years


Continue reading

Always Click and Entra ID

Posted on 2025-04-21 in code • Tagged with article, chrome, extension, alwaysclick, m365, yubikey, token, entraid, addon

A Yubikey and Entra ID sign-in annoyance mitigated with a Chrome extension


Continue reading