archive · all cases Lab notes & write-ups Incident response, forensics and detection engineering, documented as I work through it. Loading posts… Can Someone Get Into Your Microsoft 365 Account Without Your Password? A recent campaign broke into Microsoft 365 email at 79 organizations without ever needing a password. Here's how it works, and the checks and settings that matter for a small business. Why Canadians Don't Get Their Money Back After Scams (and What to Do in the First 24 Hours) Two people got the same bank-impersonation call, one in Canada and one in the U.K. One got everything back within days. Here's why the other didn't, and what to do fast if it happens to you. ← Newer Older →