merill

Install-Module AffectedKeyCredentials
Get-AffectedKeyCredentials -TenantId 0000-0000-0000-0000 -ObjectClass application -ScanAll
Get-AffectedKeyCredentials -TenantId 0000-0000-0000-0000 -ObjectClass servicePrincipal -ScanAll

merill

// Interactive sign-ins only
SigninLogs
| where AuthenticationProcessingDetails has "Legacy TLS"
    and AuthenticationProcessingDetails has "True"
| extend JsonAuthProcDetails = parse_json(AuthenticationProcessingDetails)
| mv-apply JsonAuthProcDetails on (
    where JsonAuthProcDetails.key startswith "Legacy TLS"
    | project HasLegacyTls=JsonAuthProcDetails.value
)
| where HasLegacyTls == true

merill

Install-Module Microsoft.Graph
Import-Module Microsoft.Graph
Connect-MgGraph
Select-MgProfile -Name beta
Get-MgUser -All -Filter "userType eq 'Guest'" -Select "mail,userPrincipalName,signInActivity" | Select-Object -Property mail,@{Name = 'LastSignIn'; Expression = {$_.signInActivity.lastSignInDateTime}}

merill

Extended Domain Support for Azure AD B2B

This page provides a workaround for organizations that are approaching the limit on the Allow/Block Domains for guest invites. The domain list is currently limited to 25kb.

Solution Overview

The high level overview for this solution involves

• Creating a new extension attribute (eg 'approvedForCollab')
• Create a Conditional Access policy that blocks all guests that don't have 'approvedForCollab' = Yes
• Create a Logic app that runs every 5/10 minutes. This logic app will
  • Check for new guests invited to the tenant (querying /users)
• Verify if the user's domain/tenant Id matches a known list (or is included in Connected orgs)

merill

using Microsoft.Graph;
using System;
using System.Collections.Generic;
using System.Linq;
using App.Azure.GuestInvite.Infrastructure.Authentication;
using App.Azure.GuestInvite.Model;

namespace App.Azure.GuestInvite.Infrastructure
{
    public class GraphClient : IGraphClient

merill

/* Hide posts with the 'status' category from the default RSS feed but allow them to show in the site specific feed */
function exclude_category($query) {
    if ( $query->is_feed ) {
      if (is_category()) {}
      else {
            $query->set('cat', '-154');
      }
    }
return $query;
}