Your Conditional Access Policies Suck | Top Tips for Protecting Against the Latest Threats

In this video, I break down:
-Key considerations for implementation
-Some common attacks that can get around MFA and how to protect against them
-My recommended conditional access policies
-Automation scripts to help you implement and monitor policies across customers (Conditional access as code)
Intro Music- Jordyn Edmonds • Love That
Blog: tminus365.com/your-conditiona...
Table of Contents:
00:00 -Intro
01:16 -Complexities in Conditional Access
08:48 -Common Attacks today
09:10 -Credential Harvesting
10:36 -AiTM Attacks
12:50 -Pass the cookie
14:49 -Persistance Techniques
16:54 -Recommended Baselines
28:30 -Other Key Tips
33:12 -Conditional Access as Code
39:50 -Where to go from here
____________________
Give this video a thumbs up if you enjoyed watching 👍
#microsoft #conditionalaccess #msp
Thanks for watching the video Your Conditional Access Policies Suck | Top Tips for Protecting Against the Latest Threats

[@zachorton864]

Great video. We utilize Token Protection and Continuous Access Evaluation policies as well

[@igormatic7896]

Amazing video and really great content, i am watching your videos regularly since 1 year.
I am wondering that you don't have more views, the content is really useful for a lot of people who have same or similar job roles.

[@jchamness3]

You mentioned that as an MSP, we should have Entra P2 for being a partner. I have not been able to find the renewal for this since mine 2nd year expired near the end of 2023. Do you have a link for the new renewal from Microsoft? Since my expiration, I have just been paying for P2 for my accounts but if I can get them for free, all the better. Thank you for all you do Nick!