Yara Bakeer
SC-200, AZ-500, SC-300
Yara specialises in proactive threat hunting, security awareness and cyber security education. She combines technical threat analysis with user-focused security initiatives to help organisations strengthen their overall resilience.
8 articles
What Is Mimikatz? How Attackers Steal Windows Credentials, And How To Detect And Stop It
Mimikatz pulls passwords, hashes and Kerberos tickets out of Windows. How it works, why it still succeeds, and how to detect and block it.
FundamentalsWhat Is Phishing-As-A-Service (PhaaS)? How Phishing Kits Work, And Why They Get Past MFA
Phishing-as-a-service rents ready-made phishing kits to criminals. How the kits work, why many beat MFA, and the defences that work in Microsoft 365.
FundamentalsWhat Is Vishing? How Voice Phishing Works, From Fake Help Desk Calls To Teams, And How To Stop It
Vishing is phishing by phone or voice call. How it works, from fake help desk calls on Teams to cloned voices, and the checks and Microsoft 365 controls that stop it.
FundamentalsWhat Is Social Engineering? How Attackers Manipulate People, And What AI Has Changed
Social engineering manipulates people into handing over access, money or data. The main types, what AI has changed and the Microsoft 365 controls that help.
FundamentalsWhat Is An RMM Tool? Why Attackers Love Remote Monitoring And Management Software, And How To Spot Rogue Agents
RMM tools let IT manage devices remotely, and attackers love them for the same reason. How RMM gets abused and how to find unapproved agents in Defender.
FundamentalsWhat Is ClickFix? How The Paste-And-Run Lure Works, And How To Stop It
ClickFix tricks people into pasting and running an attacker's command themselves. How the lure works, why it beats email filters, and how to stop it.
Microsoft SecurityWhat Is An Insider Threat? Types, Warning Signs And How To Detect Them In Microsoft 365
An insider threat is harm caused through legitimate access. The four types, the warning signs, and how to detect insider risk in Microsoft 365.
Threat ResearchCrystal PDF Malicious Installer Campaign
A fake PDF editor pushed through Google Ads and SEO poisoning, stealing browser credentials and session tokens. Full IOCs, a KQL hunting query, and how to respond.
Talk to the people
who do the work.
A demo against your own estate rather than a canned one, run by an analyst rather than a salesperson.