Post

Nathan McNulty
@nathanmcnulty.com

Doing some napkin math, I estimate just under 3 hours (fully optimized) to wipe 200K devices via Intune API If an attacker were unaware of API limits being per app, that bumps to ~5.5 hours under ideal conditions What happens if all admin devices are wiped first? 🤔 😳 🥺 😭

0 reposts4 likes

Christoph Voigt | 🦅💖
@spucktier.bsky.social

Ah, the wonderful world of learning never to hand out access to Graph (and APIs in general) to just about everyone with a "valid" requirement 😊 I think (haven't checked in a while) you could utilize Administrative Units to segment admin devices as the Graph context should respect that segmentation