top of page



Entra: Retrieve Entra Connect Version Information
Just a quick one—I put together a PowerShell script to fetch the latest Microsoft Entra Connect version information straight from the...

Will Francillette
Sep 5, 20251 min read


Graph: Retrieve Per User MFA state using List operator
Today, I learned that we can retrieve the status of Per User MFA directly from a list operator using either v1.0 or users endpoint This...

Will Francillette
Jul 21, 20251 min read


Entra: Use managed identities as federated credentials to connect to Defender for Endpoint API
In this blog, we will use a user managed identity to retrieve Defender for Endpoint Threat Indicators — all without handling any credentials manually. This setup leverages federated credentials for secure, seamless authentication.

Will Francillette
Jul 14, 20256 min read


MDI: Notes from the Field
In this blog, I have documented issues experienced and resolved during a Microsoft Defender for Identity (MDI) deployment

Will Francillette
Mar 25, 20253 min read


Mastering the Graph API: 10 reasons to learn PowerShell in 2025
This new series on the Graph API will take advantage of PowerShell and deep dive in Entra, Defender XDR or Intune.

Will Francillette
Mar 23, 20254 min read


Entra: Securing Teams Phones using Conditional Access - The Device Code Flow Dilemma
This blog relates to difficulties I encountered with CA policies when securing device code flow in a MS Teams Phones environment

Will Francillette
Mar 16, 20255 min read


Entra: Integrate Passkey registration with your Conditional Access Framework
In this blog we will explore the process of registering Passkeys within a robust Conditional Access framework.

Will Francillette
Mar 9, 20254 min read


Azure DevOps: Use Entra ID Managed Identities in your pipelines
Apply best practices and use Entra ID Managed Identities for your Azure DevOps pipelines

Will Francillette
Oct 30, 20246 min read


ADO: Resolve 404 (Not found) Error when using Azure DevOps Artifacts feed for your private PowerShell repositories
Install a PS module from a private Azure DevOps Artifacts feed and resolve Response status code does not indicate success: 404 (Not Found)

Will Francillette
Oct 7, 20242 min read


MDE: Why and how to use Device Groups?
Why and how to create device groups in Microsoft Defender for Endpoints

Will Francillette
Sep 30, 20244 min read


MDE: Identify and understand EDR conflict with your applications
Identify and understand MDE EDR conflict with your applications

Will Francillette
Mar 27, 20244 min read


Implementing CISA’s Zero Trust Architecture: A Microsoft Approach - Identity: Authentication
Use Microsoft solutions to secure the authentication process as recommended by CISA Zero Trust model.

Will Francillette
Mar 7, 202410 min read


Implementing CISA’s Zero Trust Architecture: A Microsoft Approach - Maturity Model
CISA’s Zero Trust Architecture: A Microsoft Approach - Maturity Model

Will Francillette
Feb 9, 20243 min read


Implementing CISA’s Zero Trust Architecture: A Microsoft Approach - Introduction
Today, I want to start a new series on a topic that has a lot of misconception and have been misused for commercial gain. It's often...

Will Francillette
Feb 2, 20242 min read


Connect to Advanced Hunting API with the Graph SDK PowerShell module
Microsoft Graph Security API simplified connection

Will Francillette
Jan 14, 20243 min read


MDE: Keeping your Antivirus up to date - deep dive
If you have a look at Microsoft Cybersecurity Reference Architecture (MCRA) and Microsoft Zero Trust implementation guidance, you will...

Will Francillette
Jan 2, 20249 min read


M365DSC: Conditional Access Monitoring Automation
M365DSC: Conditional Access Monitoring Automation

Will Francillette
Nov 2, 202311 min read


M365DSC: Monitor Conditional Access Policy Configuration Drift with Microsoft Sentinel
M365DSC: Monitor Conditional Access Policy Configuration Drift with Microsoft Sentinel

Will Francillette
Aug 29, 20234 min read


M365DSC: Use Azure Arc and Managed Identities to authenticate on-premises and 3rd party cloud
M365DSC: Use Azure Arc and Managed Identities to authenticate on-premises and 3rd party cloud

Will Francillette
Jun 14, 20233 min read


M365DSC: Getting Started Part 3 - Plan, Design and Manage your Microsoft 365 workloads
M365DSC: Getting Started Part 3 - Plan, Design and Manage your Microsoft 365 workloads

Will Francillette
May 31, 20237 min read
About Me

I am a Microsoft Solutions Architect specialized in Microsoft 365, Entra and Azure security products at Threatscape.
I love learning, blogging and coding. My interests are very diverse and span across architecture, security, cloud engineering, automation, DevOps and PowerShell.
I own as of today 17x (and counting) Microsoft certifications and have worked in IT across multiple and diverse industries for over 15 years.
bottom of page



