For many years, Microsoft has strived to migrate traditional Control Panel applets into the modern Settings application across Windows 10 and Windows 11. Nevertheless, numerous legacy applets rema…

Room: CryptoCabana (https://tryhackme.com/room/hh-cryptocabana-f81cac95) Platform: TryHackMe Difficulty: Medium Category: Cloud / Azure…

Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.

Unwanted Application Deployment Microsoft’s actions continually elicit a profound sense of bewilderment. Recently, the corporation began aggressively deploying an application christened OneD…

URL to the room: https://tryhackme.com/room/hh-cryptocabana-f81cac95

For enterprises, operating system stability is paramount, whereas routine feature updates hold a significantly lower priority. Consequently, numerous organizations prefer deploying the Windows 10 …

At a glance Actor or group Operators of the Greatness kit, also tracked as HoneyStorm Activity type Phishing-as-a-Service with AiTM token theft and device code phishing Targets or victims Microsof…

A SIEM can collect enormous amounts of security telemetry.

Task 1: Introduction

In this article I will demonstrate how poor dynamic group membership rules could be exploited by hackers in order to enumerate and escalate…