Dr. Nestori Syynimaa
@DrAzureAD
Followers
20K
Following
14K
Media
2K
Statuses
5K
Principal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK). And yes, opinions are my own ;)
Tampere, Finland
Joined April 2013
#AADInternals Azure AD & Microsoft 365 kill chain shows how different attacker roles can get access to #AzureAD and #Microsoft365. Pro tips:.1. Use MFA!.2. Avoid inviting unnecessary guests.3. Minimize # of Global Admins.4. Protect your on-prem servers.
5
184
533
RT @RedByte1337: I just noticed that the domain enumeration technique with the Autodiscover endpoint is suddenly not working anymore. This….
0
17
0
RT @msftsecresponse: Calling all MSRC Identity security researchers! We've dropped new domains into scope. Ready, set, go, hack! https://t.….
microsoft.com
Vulnerability reports on Identity services, including Microsoft Account, Azure Active Directory, or select OpenID standards.
0
15
0
RT @TechMentorEvent: (1/4) Meet @DaveKawula, Principal Consultant at TriCon Elite Consulting, Enterprise Consultant, Technology Evangelist,….
0
1
0
RT @BsidesORL: Career Village will be hosting online sessions leading up to the BSides Orlando conference, we welcome submissions for the C….
0
2
0
Congratulations to all who renewed their Microsoft MVP status for the next year 🎉🔥.
0
1
12
Slash was amazing (as always) but Axl's voice was muffled most of the time 🤬
0
0
8
RT @cybersaiyanIT: Another Monday. Another week of… endless emails, annoying meetings, and oh look, a three-headed monkey behind you!. Now….
0
9
0
Updated to include RomHack!.
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September!.
1
0
18
My Central Europe / Canada tour looks like this, looking forward to seeing excellent presentations and having inspiring discussions 🔥 See you in September!.
1
1
11
RT @msftsecresponse: At just 13 years old, Dylan Ryan-Zilavy became the youngest security researcher to collaborate with MSRC. What started….
0
12
0
RT @cybersaiyanIT: #RomHack2025 #cybersecurity training sessions are starting strongly, with Dirk-Jan’s course already fully booked!.If you….
0
5
0
RT @BsidesORL: 🛰️ Have a talk or workshop idea ready for launch?.The BSides Orlando 2025 CFP is now open!.Whether you're a first-timer or s….
0
6
0
RT @XintraOrg: CALL FOR CONTRIBUTORS. Join our team as a red/blue contributor :). - Challenging, realistic emulations.- Hack & forensicate….
0
4
0
RT @_dirkjan: Pretty cool! If you use the tool with a public client and scope from you can add this to roadtx inter….
0
43
0
