Nathan McNulty's banner

Nathan McNulty

@NathanMcNulty • 18,518 subscribers

Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🦋@nathanmcnulty.com

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

This was super fun, and I thought I'd share a quick demo I had recorded in the event of technical issues :) I repurposed my Key Vault passkey provider to accept a webhook from evilginx to automate passkey registration along with other tooling:

This was super fun, and I thought I'd share a quick demo I had recorded in the event of technical issues :) I repurposed my Key Vault passkey provider to accept a webhook from evilginx to automate passkey registration along with other tooling:

20,735 Aufrufe • vor 1 Monat

Why yes, yes we can use ESTSAUTH captured from evilginx to automatically register a passkey

Why yes, yes we can use ESTSAUTH captured from evilginx to automatically register a passkey

35,043 Aufrufe • vor 7 Monaten

A couple weeks ago, Fabian Bader and I launched an unofficial PowerShell module for Defender XDR With this module, you can perform tasks and access data that are not possible via official APIs 🔥 Check out the video below, we're just getting started Welcome to XDRInternals :)

A couple weeks ago, Fabian Bader and I launched an unofficial PowerShell module for Defender XDR With this module, you can perform tasks and access data that are not possible via official APIs 🔥 Check out the video below, we're just getting started Welcome to XDRInternals :)

37,463 Aufrufe • vor 8 Monaten

Muahaha, interactive Live Response inside of PowerShell!

Muahaha, interactive Live Response inside of PowerShell!

31,150 Aufrufe • vor 6 Monaten

For science, I recreated this tool from scratch using Sonnet 4.5 instead of Sonnet 4, added three types of reports, and an export to PDF button You can find the AI chat, sample data, sample PDF reports, and the PowerShell script in my GitHub repo:

For science, I recreated this tool from scratch using Sonnet 4.5 instead of Sonnet 4, added three types of reports, and an export to PDF button You can find the AI chat, sample data, sample PDF reports, and the PowerShell script in my GitHub repo:

34,212 Aufrufe • vor 8 Monaten

For anyone that hasn't migrated their authentication methods in Entra yet, I recorded a guide with some common gotchas I'm really just trying to learn OBS and my gear, sorry for the potato quality, it's probably not Twitter's fault :p Working on getting better at this format ;)

For anyone that hasn't migrated their authentication methods in Entra yet, I recorded a guide with some common gotchas I'm really just trying to learn OBS and my gear, sorry for the potato quality, it's probably not Twitter's fault :p Working on getting better at this format ;)

42,860 Aufrufe • vor 1 Jahr

Struggling to find the right words for this thread... but the most important thing is I need help from orgs with tons of MDE licenses Org name, # of licenses, willing to share contact info or contact MS when needed Install any 3rd party AV = bypass Defender / Tamper Protection:

Struggling to find the right words for this thread... but the most important thing is I need help from orgs with tons of MDE licenses Org name, # of licenses, willing to share contact info or contact MS when needed Install any 3rd party AV = bypass Defender / Tamper Protection:

35,533 Aufrufe • vor 1 Jahr

Fully automated deployment of Maester for long term monitoring, including optional Web App secured by Entra authentication 😎 Install azd and azure cli, then: azd init -t nathanmcnulty/azd-maester cd solution-name azd up

Fully automated deployment of Maester for long term monitoring, including optional Web App secured by Entra authentication 😎 Install azd and azure cli, then: azd init -t nathanmcnulty/azd-maester cd solution-name azd up

14,918 Aufrufe • vor 6 Monaten

It looks like Microsoft finally shipped the ability to sign into Microsoft Authenticator (and other apps like Outlook) with passkeys! This means we can now sign in and provision passkeys in Microsoft Authenticator on Android using TAP, Device Code flow, and passkeys 🥳

It looks like Microsoft finally shipped the ability to sign into Microsoft Authenticator (and other apps like Outlook) with passkeys! This means we can now sign in and provision passkeys in Microsoft Authenticator on Android using TAP, Device Code flow, and passkeys 🥳

25,264 Aufrufe • vor 1 Jahr

I kept meaning to write an article for this, decided to record a quick video instead 🎥 TL;DW - Create an auth context, target the auth context in a CA policy (SIF Every time, other conditions), select auth context in PIM role settings Thanks Stephan G for the reminder :)

I kept meaning to write an article for this, decided to record a quick video instead 🎥 TL;DW - Create an auth context, target the auth context in a CA policy (SIF Every time, other conditions), select auth context in PIM role settings Thanks Stephan G for the reminder :)

15,843 Aufrufe • vor 1 Jahr

Keine weiteren Inhalte verfügbar