doing god's work!

sorry to hear. I know how annoying this is.

Yeah, rats.. that's true..

The query at the end of this article is less noisy in our environment... thoughts?

www.bi-sec.de/2024/12/28/m...

Fun part is, he held a presentation about this already in August but nobody seemed interested… www.youtube.com/watch?v=JItn...

This blogpost shows a detection query for TokenSmith:
quzara.com/blog/bypass-...

Mostly to study security related topics. But the F1 is a good idea that I did not really have on my radar. thanks.

Never had such a case but I would start here:
objective-see.org/tools.html

Same…

fortunately it is only very, very annoying. I did nothing in that tenant that was only in there. Still... a little not would have been helpful to plan better.

"Your Microsoft 365 E5 developer subscription is for development purposes only and can be revoked if you use it for purposes other than development."...

yeah. sorry. Only want to learn your products and skill up. 🙄

The tenant was still working last week. Was testing something tgere.. At least a little heads-up and a tiny warning would have been nice.

So out of nothing my whole test environment is gone and if I am correct at the moment there is no other way than paying a tenant with all licenses, correct?

Is there any other way we non MSP people can try things out in a test environment and keep our skills up to date without spending several hundred dollars on licenses?

Really annoyed right now.