Doug (@dougsbaker) profile picture

Doug

@dougsbaker

Microsoft Security & Compliance enthusiast 💻 Helping people navigate M365💡 Youtuber 🎥 Tweeting tips and tricks 💬 Making the digital world a safer place

dougsbaker.com
Joined May 2009
  • Tweets1.5K
  • Following329
  • Followers646
191Media
Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)Photo by Doug (@dougsbaker)
Microsoft fixed the Copilot DLP gap where labeled/blocked files could still be opened in Word. No need to disable connected experiences anymore Copilot now respects the label everywhere. youtube.com/watch?v=FhHoirdv…
Copilot DLP Update: Labels Now Actually Block Access Everywhere

Copilot DLP Update: Labels Now Actually Block Access Everywhere

Microsoft made a quiet but important update to how DLP works with C...

youtube.com
2
6
349
At what point will we see the last remnants of name Azure Active Directory go away?
Image from Doug (@dougsbaker)
1
5
1,118
Who is turning on Defender Ai Agent Run time inspection? learn.microsoft.com/en-us/de… Here is an Intune Script if anyone needs it. github.com/dougsbaker/Public…
AI Agent Runtime Protection with Microsoft Defender for Endpoint (Preview) - Microsoft Defender for...

AI Agent Runtime Protection with Microsoft Defender for Endpoint (Preview) - Microsoft Defender for...

Learn how Microsoft Defender for Endpoint provides runtime protection for local AI agents by detecting and blocking prompt injection attacks.

learn.microsoft.com
3
19
2,074
What is the equivalent of aka.ms/nohello but for AI emails and documents? Like don't send that email that was clearly written by ChatGPT. This is huge! Spend more time reviewing you ai written doc than what you expect your co work to...
2
418
What do we think will be faster? having MSFT co work send 100 emails or just having a power automate do it?
Image from Doug (@dougsbaker)
4
488
Is Agent 365 actually alerting on a Malicious Copilot Agent, or is msft just suppressing the truth about UFO's? 😉
Image from Doug (@dougsbaker)
1
164
I had claude update a script I wrote 2 years back to identify use of everyone groups and over shared sites. Hope it helps someone else who is struggling with this. github.com/dougsbaker/Public…
Image from Doug (@dougsbaker)
1
4
25
3,564
Well there goes my day!
Image from Doug (@dougsbaker)
2
2
365
Windows Sandbox question for yall - anyone tried using it as a replacement for WDAG in Edge? Came up in a convo today and the new Sandbox looked like a interesting option. Curious if anyone’s stress‑tested it or run it in a real workflow yet.
1
3
253
Is it sad that fixes like this make me so happy!
Image from Doug (@dougsbaker)
2
124
I always find it fascinating to look at how large tech services handle subpoenas of customer data. This is the top 5 Country request of MSFT from the last half of 2024.
Image from Doug (@dougsbaker)
87
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise...

dirkjanm.io
138
899
112
3,169
482,395
Saw Teams Now has an Ad for unlocking premium and immediately thought of Ready Player One .
Image from Doug (@dougsbaker)
1
98
Looks like if you disable it in self-service purchases it will go away. MSFT Admin Center > Settings > Org settings > Self Service Purchases.
Image from Doug (@dougsbaker)
1
1
85
I made a video walking through how I locked down browser usage in my org using Microsoft Edge Management inside the M365 Admin Center. ✅ Control extensions ✅ Force Edge sign-in ✅ Deploy policies w/ or w/o Intune ✅ Block Chrome & others 🎥 Watch here: youtu.be/_PE4I47qjRo
2
18
1
74
20,070
New video: deep dive into Defender for Endpoint/Antivirus settings. - what every one really does - what “good” looks like - gotchas - nuances And why some of the important ones are “hidden”. Watch: youtu.be/R8btJ_SjwVk
Image from Ru Campbell (@rucam365)
3
35
1
214
17,080
That moment when you realize the file you are looking for was deleted by the retention policy you created....
1
3
186
New video: 1 hour of Conditional Access design deep dive. I always get asked to share Conditional Access templates, so I roped @NateHutch365 into the first of a few long forms on thinking about robust, scalable, and customizable CA architecture. Watch: youtube.com/watch?v=NSqfUZM7…
Image from Ru Campbell (@rucam365)
2
45
3
212
11,477
Managing Conditional Access policies can get messy. I built a PowerShell script to help you: ✅ Export CA configs ✅ Flag common issues ✅ Link right back to each policy ✅ Spot hidden risks Demo vid 👉 youtu.be/yirx0fk7cvA Script 👉 github.com/dougsbaker/CA-Exp… #ConditionalAccess
1
24
99
8,600
Chat GPT and Copilot responses are so similar now, i am not sure I can tell the difference.
Image from Doug (@dougsbaker)
Image from Doug (@dougsbaker)
2
206
Load more