Tatu Seppälä

Tatu Seppälä

@tatu.seppala365.cloud

Microsoft MVP Security | Data Security, Insider Risk, Power Platform Sec&Gov | Coffee enjoyer ☕ | Lifetime learner 💡 | Blogging @ https://seppala365.cloud

222 followers147 following88 posts

It's somehow been a full year - but I'm back in Bremen again for CollabDays, preparing tomorrow's demos and listening to jazz from the tinny phone speakers in my hotel room. The döner & dürüm kebabs are still exquisite & are the first item on my to-do list whenever I get to Germany. A tradition.

Been thinking about why insider risk is so widely misunderstood (thought to narrowly only mean malicious active employees) or outright neglected compared to attacker focused cybersec. Probably because technical signals aren't enough. You need business context, human knowledge & more to succeed.

Had the pleasure of sitting down with the BlueScreen Brothers Alex & Olav for a fun chat about the human side of security and how it's often overlooked. Have a listen!

Olav Tvedt@olavt.bsky.social

The Security Paradox - Making Security User-Friendly Join me, @alexsolaat.bsky.social and @tatu.seppala365.cloud as we dive into ITsec from the end-user perspective we tackle the age-old battle between security and user experience. It's a rollercoaster of laughs and insights youtu.be/HUygJMEuCyM

There goes the last of the christmas ham! The meaty bones will help make for an awesome soup to cap off the holidays. Waste not, want not. Although, damn - I need a bigger stock pot. 😬

New work earbuds arrived! 👍 It was time for an upgrade after my old Mpow X5s finally gave up after 5 years of loyal and meritorous service. 🎧 The WH-1000XM5s have been my daily driver headphones all year so going for the buds as well was an easy call, especially after some recommendations.

A pause in the rain coincided with a few of the short hours of daylight we get now so it was time for a Sunday trip to explore the icy forests ❄️🌲 The slippery icy paths glazed with meltwater made for a different kind of adventure.. but equipped with a thermos of hot tea, I had a good time 🍵

Maybe it's a cultural thing and probably I'm just super cynical - but many (not all!) posts in which people say they are "deeply humbled", "super excited", "truly inspired" etc. about mundane professional stuff seem.. not genuine? It feels like performative emotional hyperbole.

Reading some Roman history 📖 Some of the stuff in the Twelve Tables - an early code of laws from around 450BCE - is still surprisingly relatable. "Should a tree on a neighbour's farm be bent crooked by the wind and lean over your farm, you may take legal action for the removal of that tree." 🌲

View full thread

🥛🧈🧂 Finally, it was time to add in a bit of melted butter, salt and a bunch of whole milk. After dividing into containers, back into the oven it goes for a few hours of baking. This one'll be ready just before midnight.. 🌙

And so this year's batch of potato casserole is done. It's one of three very traditional casseroles in the Finnish christmas table, the other two being carrot and rutabaga. Not everyone here is a fan of them.. But I also suspect many haven't tasted ones made from scratch at home. Yum! 😋

🥔 When the taters were done, I peeled 'em, mashed 'em and added some of the cooking water to the mix. After a cooling down period, I also added wheat flour. 🌡️When the mix is kept in an oven for 3-5h+ at a temp >50'c & <75'c, a natural sweetening process occurs. Time to play some games.. ⏳

A thing I've come to value in people is the ability to say "I don't know" - and more importantly, "I don't know, but let's find out" Building our identities around being people who know stuff isn't sustainable. A more healthy dynamic is to focus on curiosity, learning and gradual evolution.

I use KQL in Log Analytics & Advanced Hunting every week to inform the designs of Purview solutions I build - so I started writing about it to share some tips with you. The first part is out: seppala365.cloud/2024/12/17/p... #MicrosoftPurview #DataSecurity #Compliance

seppala365.cloudPurview KQL ninja: Cloud domain upload exfiltrationAn introduction to the seriesWhy KQL?Preparations & pre-requisitesPain point: Data exfiltration through uploads to cloud domainsQuery buildupPeeking into RawEventDataDesign your sensitive servi…

Earlier this month, I delivered my last session of the calendar year at the #ESPC24 conference in Stockholm on building custom Microsoft 365 Copilot usage analytics. It seems like people enjoyed the talk - the session received a solid score of 9.38/10. A nice way to wrap up the year! 🙏 Onwards.. ➡️

Microsoft Authenticator passkey auth has really grown on me lately 🌱 Easier and faster to use than app-based notifications, with MitM&Replay resistance to boot? Yes please. Even the initial registration feels pretty simple now. ✅ #EntraID #Passwordless

Tatu Seppälä reposted

Did you know you can configure separate #Purview retention policies for #Microsoft365 #Copilot & Enterprise app Interactions? When configuring via PowerShell, remember to use Set-AppRetentionCompliance and not Set-RetentionCompliancePolicy. #Microsoft has not updated its documentation yet.

Oof, configured a #microsoftpurview on-prem MIP scanner discovery + auto-labeling deployment this week that uses nearly every single non-baseline / edge case configuration option simultaneously, some of which weren't even documented. Upgrading from v2.X to v3 was well-doc'd though, kudos for that. 🙏

Meaning non-standard SQL ports, local web proxies, separated onprem&EntraID service accts, default labels pulled from non-org-wide publishing policies, the list goes on. Learned a lot though. Probably a future blog article, eventually, once I have the free mental capacity to write one again.. 📝

Another day, another undocumented #MicrosoftPurview limitation. 🥱 Turns out you can only add <=1000 exceptions to an All Users scoped sensitivity label publishing policy with the "Set-LabelPolicy -AddExchangeLocationException" PowerShell cmdlet. Why isn't this stuff in Learn? 🤷‍♂️