Identity

Allowing ARM for Dev Box: …

Hero image generated by ChatGPT This is a personal blog and all content herein is my own opinion and not that of my employer.


What The Entra Fudge?!

There’s a particular flavour of frustration that only appears when:

  • you follow the documentation,
  • you apply least privilege,
  • you design sensible …

OID-See v1.0.1: Small …

OID-See v1.0.1 is out 🎉

This is a precision release.

No shiny new dashboards.
No dramatic architectural upheaval.
Just tighter logic, fewer false positives, and a scoring model that better reflects how Entra actually behaves in the real world.

If you’re already using OID-See, this release should …

Allow One, Allow All: …

Hero image generated by ChatGPT

This is a personal blog and all content herein is my own opinion and not that of my employer.


What The Entra Fudge?!

There’s a moment every identity or cloud security practitioner eventually hits.

The moment where you do everything right — follow the …

OID-See: Giving Your …

Hero image generated by ChatGPT

This is a personal blog and all content herein is my own opinion and not that of my employer.


Correction

When I initially done this work and posted this blog, my mental model was that lack of ownership was a bad thing. My failing was in seeing ownership as …

The Unseen Variable: …

Hero image generated by ChatGPT

This is a personal blog and all content herein is my own opinion and not that of my employer.



The Unseen Variable: Identity, Agentic AI and the Path of Least Resistance

Every few years the industry rediscovers a truth that has always been hiding in plain sight. …

InsomniHack & Entra …

This is a personal blog and all content herein is my personal opinion and not that of my employer.


Introduction

I recently had the privilege of attending the OFFENSIVE ENTRA ID AND HYBRID AD SECURITY workshop run by the brilliant Dirk-jan Mollema - author of offensive security tools ROADtools, …