Post

Nathan McNulty
@nathanmcnulty.com

⚠️ If you are using SAM-R, especially with Defender for Identity, you may be vulnerable to a downgrade attack! ⚠️ This was so dangerous they are disabling SAM-R queries in the coming weeks. Only classic sensor is affected, not XDR agent sensor (3.x). learn.microsoft.com/...

1 repost9 likes

Nathan McNulty
@nathanmcnulty.com

Unfortunately, the new sensor only supports Server 2019 and above, and it is still missing a couple detections that need to be rewritten for the new sensor Long term, we want to get everything moved over to the new sensor, but you definitely want to remove this risk for now ;)