Category: hunting

  • Who Is Still Using Text Messaging For Multi-Factor Authentication

    Who Is Still Using Text Messaging For Multi-Factor Authentication

    Hopefully not you, but that is not the point of this blog post. The point of this one is to query the sign-in logs in Microsoft Entra ID and report on other users in your tenant, and guest users from outside your tenant, who are still using SMS (text messages). Note that the user might…

  • Blocking onmicrosoft.com Emails in Exchange Online Protection

    Blocking onmicrosoft.com Emails in Exchange Online Protection

    There is a considerable uptick in emails from the default domain in Microsoft 365 tenants. These emails come from senders @ tenant.onmicrosoft.com and are not your tenant. Microsoft recently announced recipient external sender limits to reduce this, as the default is 10,000 recipients per day, but will get an additional restriction of no more than…