Resilix, Guillaume Bossiroy Zero Trust - Conditional Access Policy Maturity In the previous post, we looked at Conditional Access architecture: how policies are evaluated, how scopes and exclusions interact, how to structure the policy set, and how to test changes without cre... Roadmap Oct 29, 2026 M365 Security
Resilix, Hendrik Noben CIM - Recovery In the previous post, we covered Eradication: removing the attacker's presence from your environment entirely. The threat actor's tools are gone, their access methods are closed, and the root causes t... Roadmap Oct 21, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Conditional Access Architecture In the previous posts, we looked at the signals that Microsoft 365 can use to make access decisions: identity, identity risk, device posture, application context, network context, and data sensitivity... Roadmap Oct 5, 2026 M365 Security
Resilix, Hendrik Noben CIM - Eradication In the previous post, we covered Containment: stopping the bleeding and preventing the attacker from spreading further through your environment. Containment buys you time, but it doesn't solve the pro... Roadmap Sep 16, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Data as the Trust Boundary In the previous posts, we covered identity, identity risk, devices, applications, and the network as the dimensions Zero Trust uses to make access decisions. Each one helps answer the same question fr... Roadmap Jun 25, 2026 M365 Security
Resilix, Benjamin Bosch SMB, NTLM and Legacy Authentication Hardening After addressing permissions, object abuse and directory-level risks, the next area that deserves attention is how systems actually communicate and authenticate on the network. In many Active Director... Roadmap Jun 12, 2026 AD Security
Resilix, Hendrik Noben CIM - Containment In the previous post, we covered Identification: detecting that something is wrong, validating the threat, and understanding its scope. You've confirmed an incident is real. Now what? This is where Co... Roadmap Jun 4, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Network and Location Context In the previous posts, we covered identity, identity risk, devices, and applications as the dimensions Zero Trust uses to make access decisions. Each adds context to whether a sign-in should be allowe... Roadmap May 27, 2026 M365 Security
Resilix, Benjamin Bosch AD Security - LDAP Security and Directory Exposure This post is part of a series on Active Directory hardening. Previous editions covered credential protection, privileged access management, and Kerberos abuse. Each step builds on the last, and this m... Roadmap May 11, 2026 AD Security
Resilix, Hendrik Noben CIM - Identification In the Preparation posts of this Incident Management Roadmap, we covered the foundations: Governance (your emergency manual), Technology (your locks and cameras), Communication (your crisis messaging)... Roadmap May 8, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Application Context and Consent In the previous posts, we established Microsoft Entra ID as the primary enforcement point for cloud access, introduced dynamic identity trust with Entra ID Protection, and added device compliance and ... Roadmap Apr 30, 2026 M365 Security
Resilix, Benjamin Bosch AD Security - Permissions and Object Abuse After addressing credentials, privileged access and Kerberos abuse, the next major area attackers rely on is Active Directory object permissions. While credentials and authentication get most of the a... Roadmap Apr 23, 2026 AD Security
