Madhu PERERA
@sonitlo.com
Microsoft tech enthusiast with a focus on Defender and Intune. Consultant and freelancer helping secure identities, devices, and cloud resources.
Outside of tech, I enjoy time with my partner Kelly and our son.
Open to connect! https://qr.sonitlo.com
Outside of tech, I enjoy time with my partner Kelly and our son.
Open to connect! https://qr.sonitlo.com
@threatintel.microsoft.com Can you please fix? :) Looks like Defender is unhappy with some of the changes to URLs for Copilot :D
October 28, 2025 at 4:39 AM
@threatintel.microsoft.com Can you please fix? :) Looks like Defender is unhappy with some of the changes to URLs for Copilot :D
Trying this out. No luck so far. I keep getting this error
February 27, 2025 at 9:55 PM
Trying this out. No luck so far. I keep getting this error
Just finished reading this. #booksky #carlsagan
February 8, 2025 at 8:21 AM
Just finished reading this. #booksky #carlsagan
This is from what I was reading yesterday: “The Demon-Haunted World” by Carl Sagan. This chapter made me really sad.
February 6, 2025 at 6:15 AM
This is from what I was reading yesterday: “The Demon-Haunted World” by Carl Sagan. This chapter made me really sad.
I see the pain. Maybe this might help?
January 30, 2025 at 6:59 PM
I see the pain. Maybe this might help?
I love ChatGPT. I love having AI for things like this.
January 16, 2025 at 9:58 AM
I love ChatGPT. I love having AI for things like this.
@byteben.bsky.social Allowing Encryption Types on the Server didn't fix the issue. I ran Wireshark and I can see AS-REQ and then response fails with the error "KDC_ERR_PADATA_TYPE_NOSUPP". Server error attached. But no CA in place. Are there any certificates created with AzureADKerberos Object? :)
December 9, 2024 at 10:57 AM
@byteben.bsky.social Allowing Encryption Types on the Server didn't fix the issue. I ran Wireshark and I can see AS-REQ and then response fails with the error "KDC_ERR_PADATA_TYPE_NOSUPP". Server error attached. But no CA in place. Are there any certificates created with AzureADKerberos Object? :)
You can probably use Advanced Hunting Query to look for similar activities under ProcessCommandLine property in DeviceProcessEvents table? I know it shows up in the timeline when a user is being created or elevated to administrators group but to trigger an alert we have write the logic ourselves :(
November 15, 2024 at 4:05 AM
You can probably use Advanced Hunting Query to look for similar activities under ProcessCommandLine property in DeviceProcessEvents table? I know it shows up in the timeline when a user is being created or elevated to administrators group but to trigger an alert we have write the logic ourselves :(