Hey all, I recently published a new video outlining the recent CW breach where I recreated the attack chain live in a tenant. The big takeaway is that this could happen with any app you've granted access to in your M365 environment so don't think this doesn't apply to you if you don't leverage CW/Skykick. I made some resources you all can leverage to: 1. Protectively protect you tenant from these attacks 2. An IR plan you can activate if this every happens with a vendor you have in tenants in the future. You can find the resources here: CW Breach Resources - Secure Application Management · Tminus365 Any of you impacted by this event?

Hey all, I recently added a section in the DLP part of the classroom for a workbook with all of my DLP standard templates. The workbook contains: -DLP Templates by workload (Email, Files, Endpoint, AI, etc.) -The concept I created called "Protection Packs" which bundles the DLP policies by dataset/business outcomes -Discovery Questions you can use with customers -Accessibility by license. The key here is that I try to name and position these in a way that allows you to describe business outcomes with customers. DLP is one of the hardest things to rollout in any company in my opinion. What have your DLP projects been going like lately? What other content would you like to see?

hey All! I recently made a new script that is in the classroom that allows you to audit site permissions across all sites in a tenant. I usually do this as part of an AI readiness effort to look for overpermissioned sites, stale access, and a bunch of direct assignments that can be cleaned up. Let me know if you have any questions on it! About - SharePoint Advanced Management · Tminus365

AI automation workflows can get out of hand quick. I see companies building these highly complex flows all of the time now and they break quite frequently. It brings up a good point of truly understanding the ROI for your time and the ongoing maintenance for what you build before you dive in.

Hey everyone, I added a few new resources to the classroom. AI Usage Policy Template - This is a AI Usage policy template you can leverage for Copilot for an organization. It could be repurposed for other AI frontier models like Claude or GPT as well. AI Readiness Checklist and Hardening Guide - This is a technical checklist of controls to harden in Microsoft 365 specifically around AI usage in the organization. There is a natural progression path that can be followed over time. This derives an overall AI readiness score for a business. AI Executive Summary Template- Use this template after you fill out the AI readiness checklist to summarize the key findings to share with business leaders. I will be iterating these over time but wanted to share the initial control checks that I would recommend.