Log Analytics is a fantastic tool in the Azure Portal that provides the ability to query Azure Monitor events. It provides the ability to quickly create queries using KQL (Kusto Query Language). Once you’ve created the query however you may want to run that query through automation negating the need to use the Azure Portal every time you want to get the associated report data.… keep reading
Microsoft Build – ‘Build apps that integrate, automate, and manage security operations’ Presentation
At Microsoft Build last week I was honoured to co-present the “Build apps that integrate, automate, and manage security operations” session on the Microsoft Security Graph with Preeti Krishna and Sarah Fender
The session was recorded and is available here
The PowerPoint presentation itself is here BUILD19_SecurityDeveloperPlatform
I provided a demo of my Microsoft U.S.E.R… keep reading
Querying SailPoint IdentityNow Virtual Appliance Clusters with PowerShell
Update: Oct 2019. IdentityNow VA Clusters can be easily managed using the SailPoint IdentityNow PowerShell Module.
Today I was configuring an Integration Module for SailPoint IdentityNow. As part of that integration I needed the ID of an IdentityNow Virtual Appliance Cluster.… keep reading
Forefront/Microsoft Identity Manager – Attempted to access an unloaded AppDomain
This post is more a note-to-self for future me in case I’m in this scenario again. Today I encountered the error Attempted to access an unloaded AppDomain.
I have a custom Forefront/Microsoft Identity Manager Management Agent that requires multiple credentials for the Web Service it is integrating with.… keep reading
Winner: Microsoft Graph Security Hackathon
Recently I entered my second Hackathon. My submission was my first ever Web Application for the Devpost / Microsoft Graph Security Hackathon. This morning (Australian time) the winners were announced and ……. I WON.
To say I’m thrilled and honoured would be an understatement as the hackathon was judged by the esteemed Ann Johnson, Scott Hanselman, Troy Hunt, Rick Howard, Mark Russinovich and Olli Vanhoja.… keep reading
Indexing a SailPoint IdentityNow Attribute in an Identity Cube for use in Correlation Rules
Joining/Matching rules in any Identity and Access Management Solution can make or break an Identity Lifecycle Management implementation. Out of the box SailPoint IdentityNow provides a number of common Identity Attributes that can be used for Correlation rules (joining/matching) from Identity Sources (connected systems).… keep reading
Building SailPoint IdentityNow Azure AD Source Filters
When you have a large Azure AD tenant it is likely that you want to scope your SailPoint IdentityNow Source based on the different type of identities it contains. Using the Filtering and Scoping section of the Azure AD Source Configuration Guide from Compass I first started constructing queries as I normally would with Azure AD against the Microsoft Graph API.… keep reading
Changing SailPoint IdentityNow Identity Profiles Priorities using PowerShell
Update: Oct 2019. IdentityNow Profiles Priorities can be easily managed using the SailPoint IdentityNow PowerShell Module.
In SailPoint IdentityNow a single user is highly likely to be represented on multiple Sources, that in turn are likely to be authoritative for differing SailPoint IdentityNow Identity Profiles.… keep reading
SailPoint IdentityNow Identity Profiles Mapping Report
Update Jan 2020. This report can now be easily generated using the SailPoint IdentityNow PowerShell Module and the New-IdentityNowIdentityProfilesReport cmdlet
Last year I wrote this post here that detailed using the SailPoint IdentityNow API to generate an IdentityNow Sources HTML Report using PowerShell.… keep reading
Aggregating SailPoint IdentityNow Sources via API with PowerShell
Update: Oct 2019. Aggregating Sources can be easily managed using the SailPoint IdentityNow PowerShell Module.
Aggregating an IdentityNow Source can be achieved in a number of ways, but when you are in a development environment there will be times where you need to add additional attributes for a Source to load.… keep reading

