infoSource: SANS Internet Storm Center
Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)
One thing that folks never seem to do after "going to the CLOOOOUUUUD" is to look at their logs, logs that they would have checked daily when things were on premise. One log that really bears looking at is the log of successful and failed logins. the call for that is:
Read at the sourceSummary written for cymesh.dev. The full article lives at SANS Internet Storm Center.
Certificates expire quietly
cymesh.net watches your TLS and SSL certificates and warns you before one lapses.
monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks