Backend & APIs · Microsoft Entra ID · By vinayaklatthe

Guidance for selecting the right Azure RBAC role with least privilege - mapping required actions to built-in roles, deciding when a custom role is needed, scoping assignments correctly, and choosing…

vinayaklatthe/microsoft-security-skills

Guidance for designing BitLocker drive encryption for Windows endpoints managed via Microsoft Intune — encryption policy, silent enablement, recovery key escrow to Entra ID, TPM, pre-boot…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Entra Conditional Access (CA) and multifactor authentication — the Zero Trust policy engine that enforces grant/block decisions based on user, device, location, app, and risk…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender XDR — the unified extended detection and response suite that correlates signals across endpoints, identities, email, and cloud apps into prioritised incidents with…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Entra ID (formerly Azure AD) — cloud identity and access management and the control plane for Zero Trust.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Entra ID Protection — risk-based identity security that detects user and sign-in risk and automates remediation.

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Entra Permissions Management (CIEM) — discovers, right-sizes, and monitors permissions across Microsoft Azure, AWS, and Google Cloud.

vinayaklatthe/microsoft-security-skills

Guidance for hardening macOS endpoints managed by Microsoft Intune — automated device enrollment via Apple Business Manager (ABM), platform single sign-on (PSSO) with Entra ID, FileVault disk…

vinayaklatthe/microsoft-security-skills

Guidance for Windows Hello for Business (WHfB) — passwordless, phishing-resistant authentication using a PIN or biometric backed by an asymmetric key or certificate.

vinayaklatthe/microsoft-security-skills