Core Infrastructure and Security Blog

Options
1,396
Heinrich_Gantenbein on May 01 2024 08:47 AM
1,905
fbinotto on Apr 28 2024 11:45 PM
1,514
HoussemDellai on Apr 22 2024 09:00 AM
9,939
Jerry Devore on Apr 15 2024 03:01 PM
3,222
WillAftring on Apr 08 2024 06:41 AM
3,313
BrandonWilson on Apr 06 2024 07:24 PM
2,141
PavelYurenev on Apr 04 2024 09:00 AM
4,902
hspinto on Apr 01 2024 12:00 AM
2,828
khgandhi on Mar 28 2024 09:46 AM
2,264
Bruno Gabrielli on Mar 21 2024 01:00 AM
15.1K
Paul Bergson on Mar 19 2024 04:30 AM
4,081
fbinotto on Mar 14 2024 01:30 AM
5,545
PaulHarrison on Mar 11 2024 03:00 AM
4,010
sairashaik on Mar 06 2024 06:01 PM
14.5K
Jerry Devore on Mar 04 2024 06:38 AM
24.8K
Jason Cody on Feb 29 2024 07:12 AM
4,469
jonasoh on Feb 26 2024 03:35 AM
2,937
BrandonWilson on Feb 21 2024 08:22 PM
36.5K
DagmarHeidecker on Feb 19 2024 04:15 AM
15.8K
BrandonWilson on Feb 18 2024 04:35 PM
5,574
Arnab Mitra on Feb 15 2024 11:59 AM
5,680
hspinto on Feb 12 2024 12:00 AM
15.7K
Paul Bergson on Feb 05 2024 04:13 AM
27.4K
Paul Bergson on Jan 29 2024 05:20 AM
3,846
Bindusar on Jan 23 2024 08:27 AM
6,952
Arnab Mitra on Jan 18 2024 08:50 AM
3,703
jonasoh on Jan 15 2024 03:31 AM
7,582
jonasoh on Jan 08 2024 05:18 AM
16K
BrandonWilson on Jan 07 2024 10:40 AM
6,137
Arnab Mitra on Jan 03 2024 01:39 PM

Latest Comments

Thanks for another great article Jerry! Events 4678 and 4679 have been great for identify impacted systems. You nailed every point that we had discovered!
0 Likes
Thank you @Jason Cody for sharing the tips, may I know if this automation can still work after the user license has ben revoked, hence there is no Intune license assigned to the user anymore?
0 Likes
Hi @Nareshys have you tried integrating the $skip odata query parameter once you get to the 1000th app? If you haven't, a good test would be to just add it to your graph api call and see if it starts on the 1000th app and works its way through the rest of them. If that works, you could add another c...
0 Likes
Stefanpe, Valid information. It was meant for non-Sentinel users I modify the content on this blog to move to ADX Cluster storage sent via an Azure Event Hub
0 Likes
Has anyone been able to run this for more than 1000 app registrations/SPs? The API query returns max of 999 AppID when top=999 filter is used. How do I query if I have more than 1000 Apps? @Russ Rimmerman
0 Likes