1 min read
Passkeys for business admins
Why phishing-resistant MFA belongs on privileged accounts first, and how to start small.
#identity
9 articles
1 min read
Detecting unusual sign-ins in Microsoft 365
By Michael NarehoodMicrosoft 365
Impossible travel, new countries, and legacy protocol spikes: signals worth a human look.
1 min read
Summer interns and joiner access done safely
Temporary staff need tools on day one, not permanent Global Admin on day ninety.
1 min read
Time to rotate service account passwords
Service accounts with never-expiring passwords become permanent backdoors.
1 min readTutorial
Vendor access offboarding checklist
Contractors and MSPs change. Make sure their VPN, admin, and SaaS access changes with them.
1 min read
Spring cleaning for Active Directory and Entra ID
By Michael NarehoodMicrosoft 365
Disable stale accounts, reclaim licenses, and shrink attack surface before summer projects start.
1 min read
Offboarding: same-day access cut
Why delayed disablement is a predictable incident.
1 min readTutorial
Quarterly access reviews without the enterprise bloat
A two-hour quarterly ritual that catches privilege creep before an audit or an attacker does.
1 min readTutorial
IT onboarding checklist for new hires
Day-one access without day-one admin rights.