Aller au contenu

RootGuard Security

@rootguardsec.bsky.social did:plc:vznyt2a7ui27oq2ys4hbsu2d

Independent security assurance that assess, document, train and verify. You end with a documented security program and the evidence that it works.

Sur Bluesky depuis le

Abonnés
33
Abonnements
12
Posts
8
Jours dans les classements
0

Résumé

RootGuard Security (@rootguardsec.bsky.social) est sur Bluesky depuis le 10 octobre 2026. Le compte a 33 abonnés, suit 12 comptes et a publié 8 posts.

Présence dans les classements

Les meilleurs jours où les posts de ce compte sont entrés dans le top quotidien de Debya.

Ce compte n’est encore apparu dans aucun classement quotidien.

Posts aimés récemment

J’aime publics du réseau Bluesky.

  • Ridgeline Cyber@ridgelinecyber.bsky.social

    Free KQL detections for M365 / Entra ID attacks Compiled a reference of KQL detections for M365 and Entra ID: password spray, AiTM, consent grants, inbox rule forwarding, Golden SAML, BEC, and more. You’ll need to tune them for your own environment. ridgelinecyber.com/training/res...

    Voir le post
  • Ridgeline Cyber@ridgelinecyber.bsky.social

    If you are a defender, you may find the following PowerShell resource useful. The commands defenders run during investigations and triage, organized by ATT&CK tactic. ridgelinecyber.com/training/res...

    Voir le post
  • Ridgeline Cyber@ridgelinecyber.bsky.social

    👋 Our weekly blog is out; check it out 👇 The Remote Session Columns in Defender Don't Describe PowerShell Remoting ridgelinecyber.com/blog/remote-...

    Voir le post
  • Ridgeline Cyber@ridgelinecyber.bsky.social

    When was your last successful break-glass drill? Microsoft recommends validation at least every 90 days. Test authentication, admin access, credential retrieval, SOC alerting and acknowledgement. A successful sign-in is evidence. It is not proof that the entire recovery procedure works.

    Voir le post
  • Ridgeline Cyber@ridgelinecyber.bsky.social

    Every Entra break-glass sign-in deserves investigation. Success or failure Monitor by user object ID, not just UPN Track authentication methods, CA results and administrative changes An emergency account should never generate unexplained routine activity. #DetectionEngineering

    Voir le post

Connectez-vous pour en voir plus

Comptes bloqués

Sur Bluesky, les blocages sont publics.

Ce compte ne bloque personne.