Initial Access Detection Opportunities
🖥️ Quickassist detection: https://x.com/mthcht/status/1791034174742110226
✉️High volume of external emails sent to a single recipient
💬Teams interaction with a foreign tenant https://x.com/mthcht/status/1701947311654342663 https://x.com/hir3n_s/status/1862112250393157914
filter on usernames with IT,Help,Desk,support,Tech,Customer,Microsoft

Comments

Posting Rules

  • Be respectful to others
  • No spam or self-promotion
  • Stay on topic
  • Follow Bluesky's terms of service