[ blog ]
Field notes on Microsoft 365 security.
How I configure things, what breaks, and why. Every step is reproducible and every screenshot is sanitized.
- · [hardening]3 min
10 settings every new Microsoft 365 tenant needs on day one
The short list I check before anything else: identity first, then email, then sharing. With the PowerShell to verify each one.
- · [career]1 min
Why I started HackEC
What this blog covers, how it's written, and the one rule every post follows.
// in the queue
- MFA isn't enough: how an AiTM attack works (in a lab)
- How I secured hackec.com email: SPF, DKIM, DMARC and MTA-STS
- Before you buy Copilot: the SharePoint oversharing problem
- Conditional Access explained with 5 baseline policies