mfa-bypass

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel Microsoft Defender AI Security Detection Engineering Threat Detection Container Security Entra ID Zero Trust DevSecOps Infrastructure as Code Agentic AI 1 post
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Threat Detection

Block Device Code Phishing in Entra Without Breaking Legit Workflows

Review update (September 26, 2026): The merged rules run every 15 minutes, retain their correlation lookbacks, and gate on recent ingestion from either relevant side. Rule 2 merges duplicate representations of a successful sign-in while retaining …

18 min read Read more →