Why I started HackEC

Most Microsoft 365 security content falls into two piles. Vendor docs that tell you what a setting does but not when it hurts. And posts that promise "the ultimate hack" and leave you with a screenshot and no context.

I wanted something in between. So I'm writing it.

Who's writing

I'm Jhair Cedeno. Since March 2025 I've worked on Microsoft 365 security and compliance at a Microsoft partner MSP. I hold nine Microsoft certifications, SC-200, SC-300 and SC-401 among them, and I'm working toward SC-100, SC-500 and AB-650.

I also teach Brazilian jiu-jitsu. That shapes how I explain things more than any certification does.

What you'll find here

Five topics, and every post belongs to exactly one:

1. Administration and hardening: Entra ID, Intune, Exchange Online, Defender.
2. Identity and anti-phishing: AiTM, passkeys, FIDO2, Conditional Access. This is the one I research.
3. Compliance, Purview and GRC: DLP, labels, retention, ISO 27001, NIST CSF.
4. AI and Copilot security: oversharing and data governance before you switch Copilot on.
5. Career and certifications: study paths, home labs, getting hired.

How it's written

• Reproducible. If I show a configuration, you get the steps and the PowerShell to repeat it.
• Sanitized. No tenant IDs, domains, user names or IPs from real environments. No client names. Ever.
• Lab only. Anything offensive runs in my own lab, with authorization.
• Honest about trade-offs. Every control breaks something for someone. I'll say what.

The rule

Position before submission. On the mat, you don't go for the finish from a bad position. In a tenant, you don't buy another tool before identity, email and sharing are set up properly.

Fundamentals first. Tools second.

If that sounds useful, subscribe to Secure Tenant below. One topic every two weeks, no filler.