Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Semperis Recovery for Azure AD: Protecting Critical Resources

semperis.com | blog | #cloud | #cloud-security | #entra-id | #backup | #disaster-recovery | #azure-ad | #hybrid-identity

Summary

Hybrid identity attacks can wipe cloud-only objects Azure AD won't replicate. Semperis Recovery for Azure AD restores users, groups, and roles, even hard-deleted ones, to speed cyber recovery.
Published
Collected

original ↗

Related coverage

blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · semperis.com
Top Security Risks to Watch for in Shifting to Hybrid Identity Management
As enterprises integrate Microsoft Entra ID (formerly Azure AD) with on-prem AD, this piece examines hybrid identity risks—above all permission sprawl—and urges a look-before-you-leap approach to cloud identity adoption.
blog · semperis.com
Semperis DSP: Enhance AD and Entra ID Protection from Cyber Threats
Hybrid attacks pivot between Entra ID and on-prem AD; Microsoft flagged a broken barrier between on-prem and cloud admin. Shows how DSP detects and auto-remediates changes across both environments.
blog · semperis.com
MFA for Active Directory: An Overview
MFA for AD is challenging: native support is smartcards only, so organizations layer Windows Hello for Business or Duo on endpoints. Covers on-prem and hybrid options including Entra Connect.
blog · semperis.com
4 Reasons to Increase Recoverability of Entra ID Resources
Four reasons to improve Entra ID recoverability: widespread misconfigurations, the recycle bin's limited 30-day protection, hard-deleted objects like service principals, and hybrid attack-path gaps.
blog · semperis.com
Why DC Snapshots Are No Substitute for Active Directory Backups
Explains why hypervisor snapshots of domain controllers can't replace proper AD backups: restores risk lingering objects, replication inconsistency, and USN rollback during forest recovery.
back