Your browser does not support JavaScript.
Nathan McNulty
CTRL
K
Nathan McNulty
Blog
Notes
Toggle Dropdown
Azure
Defender
Entra
Intune
Purview
Other
Solutions
Toggle Dropdown
Azure
Defender
Entra
Intune
Purview
Other
Media
Archives
Personal
GitHub
GitHub
Ko-fi
Ko-fi
LinkedIn
LinkedIn
RSS
X
Twitter
Theme
Auto
Dark
Light
Home
Tags
Microsoft Graph
Microsoft Graph
5
Posts
2
Sections
1
Types
June 18, 2026
2 min read
Notes
Nathan McNulty
Audit device code flow before blocking it
Entra
Conditional Access
Microsoft Graph
PowerShell
Find device code sign-ins and test a Conditional Access block before enforcing it.
Read more about Audit device code flow before blocking it.
April 18, 2026
2 min read
Notes
Nathan McNulty
Scope application access to mailboxes
Entra
Email
Microsoft Graph
Limit Exchange application permissions to the mailboxes an app actually needs.
Read more about Scope application access to mailboxes.
February 2, 2025
1 min read
Solutions
Nathan McNulty
Operational Collections 2.0
Log Analytics
Intune
Remediations
Microsoft Graph
Automate security group membership based on device hardware, software, vulnerabilities, and other inventory data
Read more about Operational Collections 2.0.
December 14, 2024
2 min read
Notes
Nathan McNulty
Microsoft Graph PowerShell examples for Application Management
Microsoft Graph
PowerShell
Use reviewed Graph PowerShell samples to report application credential expiry.
Read more about Microsoft Graph PowerShell examples for Application Management.
November 3, 2023
2 min read
Notes
Nathan McNulty
Use the authentication registration report
Entra
Microsoft Graph
PowerShell
Filter the Graph authentication registration report instead of querying every user's methods.
Read more about Use the authentication registration report.
Nathan McNulty
Azure, Defender, Entra, Intune, and more
Featured
Recent
Improving passkey registration experiences
Comprehensive Guide to Configuring Advanced Auditing
Managing Restricted Groups with Access Packages
Intune - Microsoft Tunnel VPN Gateway
Azure Automation - Device Cleanup v2
Left
Right
Phishing-Resistant by Default: Microsoft’s Passkey Shift
From Initial Access to Persistence: Abusing Synced Passkeys in Azure
Nathan McNulty
Audit device code flow before blocking it
Nathan McNulty
Defender Firewall FQDN filtering - prefer NRPT for broad blocks
Nathan McNulty
Use an allowlist for VS Code extensions
Left
Right
Tags
Entra
19
Intune
13
Defender
10
Azure
9
PowerShell
7
Conditional Access
6
Microsoft Graph
5
Azure Automation
4
PIM
4
Auditing
3
Email
3
Log Analytics
3
Purview
3
SSO
3
Access Packages
2
Archive
2
AWS
2
Defender for Endpoint
2
KQL
2
Lab
2