Nathan McNulty's banner

Nathan McNulty

@NathanMcNulty • 18,238 subscribers

Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🦋@nathanmcnulty.com

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Why yes, yes we can use ESTSAUTH captured from evilginx to automatically register a passkey

Why yes, yes we can use ESTSAUTH captured from evilginx to automatically register a passkey

34,747 views • 3 months ago

Muahaha, interactive Live Response inside of PowerShell!

Muahaha, interactive Live Response inside of PowerShell!

31,092 views • 3 months ago

A couple weeks ago, Fabian Bader and I launched an unofficial PowerShell module for Defender XDR With this module, you can perform tasks and access data that are not possible via official APIs 🔥 Check out the video below, we're just getting started Welcome to XDRInternals :)

A couple weeks ago, Fabian Bader and I launched an unofficial PowerShell module for Defender XDR With this module, you can perform tasks and access data that are not possible via official APIs 🔥 Check out the video below, we're just getting started Welcome to XDRInternals :)

37,404 views • 5 months ago

For anyone that hasn't migrated their authentication methods in Entra yet, I recorded a guide with some common gotchas I'm really just trying to learn OBS and my gear, sorry for the potato quality, it's probably not Twitter's fault :p Working on getting better at this format ;)

For anyone that hasn't migrated their authentication methods in Entra yet, I recorded a guide with some common gotchas I'm really just trying to learn OBS and my gear, sorry for the potato quality, it's probably not Twitter's fault :p Working on getting better at this format ;)

41,772 views • 10 months ago

Fully automated deployment of Maester for long term monitoring, including optional Web App secured by Entra authentication 😎 Install azd and azure cli, then: azd init -t nathanmcnulty/azd-maester cd solution-name azd up

Fully automated deployment of Maester for long term monitoring, including optional Web App secured by Entra authentication 😎 Install azd and azure cli, then: azd init -t nathanmcnulty/azd-maester cd solution-name azd up

14,918 views • 3 months ago

Struggling to find the right words for this thread... but the most important thing is I need help from orgs with tons of MDE licenses Org name, # of licenses, willing to share contact info or contact MS when needed Install any 3rd party AV = bypass Defender / Tamper Protection:

Struggling to find the right words for this thread... but the most important thing is I need help from orgs with tons of MDE licenses Org name, # of licenses, willing to share contact info or contact MS when needed Install any 3rd party AV = bypass Defender / Tamper Protection:

35,533 views • 1 year ago

If you are licensed for PIM, this is such a hidden gem I really wish the name of the blade wasn't Alerts... It's really a recommendation with fix it buttons, like Defender for Cloud does, except this is for Identity 😎 Some easy but highly valuable wins here :)

If you are licensed for PIM, this is such a hidden gem I really wish the name of the blade wasn't Alerts... It's really a recommendation with fix it buttons, like Defender for Cloud does, except this is for Identity 😎 Some easy but highly valuable wins here :)

26,659 views • 1 year ago

I kept meaning to write an article for this, decided to record a quick video instead 🎥 TL;DW - Create an auth context, target the auth context in a CA policy (SIF Every time, other conditions), select auth context in PIM role settings Thanks Stephan G for the reminder :)

I kept meaning to write an article for this, decided to record a quick video instead 🎥 TL;DW - Create an auth context, target the auth context in a CA policy (SIF Every time, other conditions), select auth context in PIM role settings Thanks Stephan G for the reminder :)

15,843 views • 1 year ago

No more content to load