David O'Brien

David O'Brien

@daveobrien.bsky.social

Sick of writing cloud assessment reports? ARGOS writes them for you. Founder of ARGOS Cloud Security. Former Microsoft Azure MVP (10 years), private pilot, dad.

153 followers82 following134 posts

Pinned

Follow me here if you're interested in: Tech stuff: Cloud security, cybersecurity in general, well-architected cloud (mainly Azure / Entra ID), building a SaaS, being a tech Founder Non-tech stuff: Aviation, being a private pilot, strongman training, owning way too many sneakers

πŸ”₯ Hottest latest release! πŸ”₯ Why is this "demo" Entra ID user a potential security issue? Explain in one simple image why. (Hint: Global Reader, and access to an Azure Resource Group with important resources, ARGOS also told you "no MFA" 😱) #m365 #entraid #azure

πŸ‘€πŸ‘€πŸ‘€ What's this? In the upcoming release ARGOS's cloud assessments will show E2E info from #EntraID to #Azure. Entra apps with security issues and access to Azure resources or a user with admin permissions that has User Access Admin permissions on a Subscription? Info: argos-security.io

TIL: Basically the same workflow on GitHub Actions, moved from windows-latest (bottom run) to ubuntu-latest (top run) is almost 50% faster. The top run even has one additional step in it downloading and extracting a 70MB tar from the internet. #github #cicd #windows #linux

πŸ“Ž Cloud Attack Paths πŸ‘€ Identifying how someone / something can "walk" through your #Azure cloud is important, and often not trivial. Instead of manual digging, go get a cup of tea and have ARGOS draw you a picture of the environment. argos-security.io #cloudsecurity #microsoftsecurity #entraid

While architecturally, this is almost as desired, the point here is, the web service is unprotected (no API Gateway, no WAF, etc) and people often don't understand what paths they open up in an environment via managed identities.

✈️ David on tour ✈️ #Munich - 22-23/05 #Düsseldorf - 26-28/05 (speaking at Cloud Summit) #London - 29-31/05 Who wants to catch up in any of these cities? I'd love to meet up. #cloud #microsoft #m365 #cloudsecurity #entraid #azure

Little sneak peak! Customers ask us regularly "can we build our own #PowerBI dashboard with ARGOS data?". You sure can! We're no PowerBI wizards, but if you are, you have lots of data available to play with. Demo video to come next week. More info on argos-security.io #azure #entraid #m365

Got some questions via DMs about this: - yes, all current SCuBA checks (that are automatable) are covered - yes, we're working on further M365 coverage - yes, on average it takes our customers 6 minutes to set this up #entraid #m365 #cloudsecurity

David O'Brien@daveobrien.bsky.social

Are you like me and want to understand how compliant with CISA SCuBA your #EntraID tenant is? One-off or continuous checking, monitoring and reporting, set up in minutes. We eat our own dogfood and get notified whenever ARGOS finds something. Learn more at argos-security.io #m365 #cloudsecurity

Are you like me and want to understand how compliant with CISA SCuBA your #EntraID tenant is? One-off or continuous checking, monitoring and reporting, set up in minutes. We eat our own dogfood and get notified whenever ARGOS finds something. Learn more at argos-security.io #m365 #cloudsecurity

Attended a #DevSecOps session today, and while technically correct in what they said, the thing that was missed by all -> None of it will work without organisational structure change. You'll just annoy everybody with findings, vulns, issues, that nobody can do anything about. #azure #security

Yet another Microsoft Support ticket where I'm being told "this is out of our scope, you need to raise a new ticket with someone else". Then they say "you must use Graph API for this" and when I ask "which API?" they say "there is none". Helpful. Slow. Clap. Thanks!

No secrets with us! Bookmark this: argos-security.io All the demo videos in one place, more coming over the next weeks. Next one is for our Service Providers out there. Custom Azure / Entra ID / M365 security dashboards with PowerBI powered by ARGOS. #azure #entraid #m365 #powerbi

Love feedback like this. They've been one of our earliest customers, shaping the product, and in turn getting great results for them and their customers when assessing Azure and Entra ID / M365 environments. For consultancies, saving time = saving money. What's not to like? argos-security.io

Has anybody managed to use bicep to connect a Flex Consumption #Azure Function to a subnet / vnet integration? All I'm getting is this error in the screenshot (when testing via portal). The portal says the subnet is available for integration. No, no other error, of course.

One thing that really pi**es me off with Microsoft Support is their inability / unwillingness to route tickets internally. "Not in our scope, we'll archive this ticket. Find someone else." Your internal structures are not my problem. I don't need to know your RACIs.

Today I remembered... Large GitHub Pull Requests break GitHub Actions. If you have a lot of changed files (large refactor) then some build actions (if you have multiples on a repo) will not trigger.

No secrets with ARGOS. Happy new year! We released 30 new controls (over 70 now!) for #EntraID & #M365 that are assessed with almost no effort from your side, in minutes, generating a comprehensive, usable report. What controls? See πŸ‘‡ Watch demo videos & get a sample report from argos-security.io

Microsoft wants people to standardise on GraphAPI. Bummer that most of the M365 admin stuff is not available in GraphAPI. πŸ‘Ž Want to get or set Teams meeting policies? Nope. ❌ Want to get or set anything Exchange related? Nope ❌

Literally, at the 11th hour... (only had 50mins until it expired) Clearly, can still perform the cyberz at 11pm, while on holidays. πŸ‘ Nice to see some updated questions on #entraid , #azure , #m365 and #sentinel

πŸŽ… Santa is clever enough to rely on his elves to make the magic happen-smart consultants rely on ARGOS. πŸŽ„ Santa knows you can’t do it all alone. With ARGOS, you have the ultimate helper. Because creating magic doesn’t mean doing it all yourself! #cloudsecurity #azure #microsoftentraid #entraid

Save money on your non-prod #Azure VMs You're already turning your Azure VMs off over the holidays? Nice! Want to save even more money? (No, I'm not telling you to delete them πŸ˜‚) Find some handy #PowerShell code in this short blog article. cloud-right.com/2024/12/azur... #microsoft #cloud

cloud-right.comAzure - Save Money by Changing Disk TypeAzure - Save Money by Changing Disk Type Here’s a quick tip to save money on your Azure VMs by changing the disk type. Especially over the holidays, when you might be running VMs for development or te...