Activity
Mon
Wed
Fri
Sun
Dec
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
What is this?
Less
More
6 contributions to Tminus365
10d •
ConnectWise Breach Resources
Hey all, I recently published a new video outlining the recent CW breach where I recreated the attack chain live in a tenant. The big takeaway is that this could happen with any app you've granted access to in your M365 environment so don't think this doesn't apply to you if you don't leverage CW/Skykick. I made some resources you all can leverage to: 1. Protectively protect you tenant from these attacks 2. An IR plan you can activate if this every happens with a vendor you have in tenants in the future. You can find the resources here: CW Breach Resources - Secure Application Management · Tminus365 Any of you impacted by this event?
0 likes • 9d
Thanks nice, this is awesome and very helpful. We had a few clients on skykick (our own tenant also had the effected apps) luckly it looks like we dodged a bullet. Revewing Entra ID apps is something MSPs will have to take more seriously (my self inclulded). I'm thinking about how to approch this more with clients as even when i present a list of Entra ID apps most clients just shrug their shoulders if they are in use or not. Time to get more ruthless i guess.
Sep 21 •
Passkeys-Full Course
Hey all! Passkeys are quickly becoming the future of authentication in M365. Outside of general security, they can help a ton with securing AI workloads and the more sophisticated attacks we are seeing with AI today. I put together a full course you can check out in the classroom: Full Course - Passkeys · Tminus365 In this classroom section, I also include a full troubleshooting guide for helpdesk along with end-user self-service guides depending on the passkey types you want to support. How many of you are rolling out passkeys today?
2 likes • Sep 21
This is awesome nick, thank you! Amazing content For my clients I've decided to only support 3 methods. 1. Windows hello for business. 2. Authenticator passkey (Device Bound) 3. TAP Rollout seems to be going good and I'm also combining this as an excuse to remove text and enforce phish resistant MFA via CAP.
Sep 6 •
Full DLP Course
Hey all, Recently published a full course on Data Loss Prevention with Microsoft 365. I've done dozens of these rollouts now so took the collective learning to walk you through a full tutorial from 0 to a repeatable DLP framework. Check out the resources in the classroom: Full Course - Data Loss Prevention · Tminus365
0 likes • Sep 7
This is so cool Nick, thanks so much for sharing
Jul 10 •
4 workflows for real ROI in Copilot Cowork
I wanted to share 4 workflows that I have set up in Copilot Cowork that have saved me a ton of time. ⏲️ I've spent time refining these with custom skills, scheduled prompts, and tweaking the prompts overall for consistency. What are some of the ways in which you use cowork daily? i have some of the skill md files i use in the classroom if you wanted to check them out: About - Copilot Cowork Skills · Tminus365
1 like • Jul 10
This is awesome Thanks so much Nick!
Jul 9 •
Microsoft Cowork Cost
Pro tip of the day: Microsoft Cowork now has a Cost skill you can call with /cost to understand how many credits you've consumed within a chat. I spent $6 to do research and draft an email 🫥 Have any of your started doing cost experiments since credits went live?
1 like • Jul 10
I'm not sure i would use cowork for things copilot chat can do. It's only when I need tasks executing would I pass that over to cowork. I have noticed the structure of the prompt matters. Something ambiguous (and a bit rubbish) like “Create a PowerPoint from our sales CSV showing performance. The CSV in the Sales Team" is more expensive than when you give cowork the info it needs (Using the sales CSV linked here, make exactly 5 slides — performance summary of our top 5 customers)
0 likes • Jul 10
@Nick Ross cowork charges you for being lazy! Im stealing that one 🤣
1-6 of 6
