[{"data":1,"prerenderedAt":1457},["ShallowReactive",2],{"sc:header-data-nl":3,"sc:footer-data-nl":489,"post-nl--posts-2026-03-20-stryker-attack-intune-privilege-13fd48e22fe471":519,"authors_data":878,"content-nl-list-7b291c2dd91a4":1231,"authors_data:Jan Geisbauer":1451},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"nl":13},{"title":14,"url":15,"alt":16},"Home","/nl","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"nl":21},{"title":22,"description":23},"Workplace","Slimme, veilige en flexibele werkplekken op basis van Microsoft 365, waarin moderne technologie en identiteitsdiensten samenkomen.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"nl":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"nl":34},{"title":35,"url":36},"Managed Intune","/nl/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"nl":40},{"title":41,"url":42},"Managed Entra","/nl/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"nl":46},{"title":47,"url":48},"Managed Workplace","/nl/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"nl":52},{"title":53,"url":54},"Consulting Services","/nl/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"nl":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"nl":64},{"title":65,"url":66},"Microsoft Entra Suite","/nl/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"nl":70},{"title":71,"url":72},"Microsoft Intune","/nl/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"nl":76},{"title":77,"url":78},"Microsoft Windows","/nl/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"nl":82},{"title":83,"url":84},"Windows 365 Cloud PC","/nl/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"nl":88},{"title":89,"url":90},"Cloud Workplace Foundation","/nl/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"nl":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"nl":100},{"title":101,"url":102},"Microsoft 365 Copilot","/nl/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"nl":106},{"title":107,"url":108},"Teams","/nl/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"nl":112},{"title":113,"url":114},"SharePoint & Power Platform","/nl/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"nl":118},{"title":119,"url":120},"Exchange Online","/nl/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"nl":124},{"title":125,"url":126},"Information Protection & Compliance","/nl/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"nl":130},{"title":131,"description":132},"Azure","Groeien met Azure: lagere cloudkosten, meer efficiëntie en ruimte voor innovatie met IaaS en PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"nl":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"nl":142},{"title":143,"url":144},"Azure Managed Services","/nl/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"nl":148},{"title":149,"url":150},"Azure Consulting","/nl/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"nl":154},{"title":155},"Scenario's",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"nl":160},{"title":161,"url":162},"Plan je cloud","/nl/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"nl":166},{"title":167,"url":168},"Migreren naar de cloud","/nl/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"nl":172},{"title":173,"url":174},"Vernieuw je business","/nl/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"nl":178},{"title":179,"url":180},"Herzie je VMware-strategie","/nl/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"nl":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"nl":190},{"title":191,"url":192},"Azure Foundation","/nl/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"nl":196},{"title":197,"url":198},"Azure AI Foundation","/nl/azure/azure-ai-foundation",{"name":86,"languages":200},{"nl":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"nl":205},{"title":206,"url":207},"Azure Data Foundation","/nl/azure/azure-data-foundation",{"name":188,"languages":209},{"nl":210},{"title":211,"url":212},"Azure Container Foundation","/nl/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"nl":216},{"title":217,"url":218},"Managed Dark Tenant","/nl/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"nl":222},{"title":223,"url":224},"Cloud Adoption Framework","/nl/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"nl":228},{"title":229,"url":230},"Cloud Competence Center","/nl/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"nl":234},{"title":235,"description":236,"emergency":237},"Security","Waakzaam in de cloud met een bekroonde 24/7 managed service, incident response en moderne bescherming van je infrastructuur.",{"text":238,"href":239,"skin":240,"icon":241},"Onder aanval?","/nl/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"nl":249},{"title":250,"url":251},"Managed Red Tenant","/nl/security/managed-red-tenant",{"name":214,"languages":253},{"nl":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"nl":259},{"title":260,"url":261},"Sentinel Data Lake","/nl/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"nl":265},{"title":266,"url":267},"Security Consulting","/nl/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"nl":274},{"title":275,"url":276},"Cloud Security Operations Center","/nl/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"nl":280},{"title":281,"url":282},"Global Secure Access","/nl/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"nl":286},{"title":287,"url":288},"MyWorkID","/nl/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"nl":295},{"title":296,"url":297},"Preventive Services","/nl/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"nl":301},{"title":302,"url":303},"Data Security Service","/nl/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"nl":307},{"title":308,"url":309},"Security Copilot Agents","/nl/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"nl":313},{"title":314,"url":315},"NIS2 implementeren","/nl/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"nl":319},{"title":320,"description":321},"Producten","Companion-producten voor een volledig beveiligde, 100% cloud-native Microsoft-omgeving die samenwerking, netwerkauthenticatie en softwarebeheer versterken.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"nl":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Softwaredistributie vanuit de cloud",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"nl":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certificaatdistributie vanuit de cloud",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"nl":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Werk met je lokale Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"nl":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migreer je data van de ene server naar de andere",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"nl":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider voor Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"nl":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Authenticatie voor je netwerk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"nl":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Contacten vinden in Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"nl":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-monitoring in realtime",{"name":396,"languages":397},"casestudies",{"nl":398},{"title":399,"url":400,"description":401},"Case studies","/nl/casestudies","Pionier in de cloud: je Microsoft-partner voor doordachte cloudoplossingen met een blueprint-gebaseerde aanpak en expertise in Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"nl":405},{"title":406,"description":401},"Bedrijf",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"nl":411},{"title":412},"Over ons",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"nl":417},{"title":418,"url":419},"Facts & Figures","/nl/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"nl":423},{"title":424,"url":425},"Contact & locaties","/nl/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"nl":429},{"title":430,"url":431}," glueckkanja Zwitserland","/nl/company/switzerland",{"name":433,"languages":434},"austria",{"nl":435},{"title":436,"url":437},"glueckkanja Oostenrijk","/nl/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"nl":441},{"title":442},"Carrière",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"nl":447},{"title":448,"url":449},"Carrière-overzicht","/nl/career",{"name":451,"languages":452},"company-young-professionals",{"nl":453},{"title":454,"url":455},"Young Professionals","/nl/young-professionals",{"name":457,"languages":458},"company-jobs",{"nl":459},{"title":460,"url":461},"Vacatures","/nl/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"nl":465},{"title":466},"Actueel",[468,474],{"name":469,"languages":470},"company-blog",{"nl":471},{"title":472,"url":473},"Blog","/nl/blog",{"name":469,"languages":475},{"nl":476},{"title":477,"url":478},"Events","/nl/events",[480],{"name":481,"languages":482},"career-meta",{"nl":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"nl":487},{"title":488,"url":425,"active":484},"Contact",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksNl":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Privacy","/nl/privacy",{"title":514,"url":515},"Juridische informatie","/nl/imprint",{"title":517,"url":518},"Geen cookies","/nl/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":530,"eventid":494,"extension":785,"hideInRecent":484,"layout":786,"meta":787,"moment":791,"navigation":325,"path":871,"seo":872,"stem":873,"tags":874,"webcast":484,"__hash__":877},"content_nl/posts/2026-03-20-stryker-attack-intune-privilege.md","Eén adminaccount was alles wat er nodig was.",[523],"Jan Geisbauer",{"type":525,"value":526,"toc":770},"minimal",[527,531,534,539,542,545,548,552,554,557,560,563,566,570,572,575,578,582,584,587,590,593,597,599,602,609,614,617,624,627,630,633,640,643,650,661,665,667,673,676,686,689,692,695,698,701,704,708,710,713,716,719,727,730,733,737,739],[528,529,530],"p",{},"Woensdag 11 maart 2026. Medewerkers in Stryker-kantoren in 79 landen zetten hun computers aan en vonden ze leeg. Inlogschermen vervangen door een logo. Bedrijfslaptops, zakelijke telefoons, privéapparaten die in het BYOD-programma van het bedrijf waren geregistreerd, allemaal gelijktijdig gewist, in één nacht. Geen ransomware, geen malwaresignaturen, niets wat een endpoint-detectietool had kunnen opmerken.",[528,532,533],{},"De aanvaller, een pro-Iraanse hacktivistengroep genaamd Handala, had Strykers eigen IT-managementinfrastructuur tot wapen gemaakt.",[535,536,538],"h2",{"id":537},"wat-er-werkelijk-is-gebeurd","Wat er werkelijk is gebeurd",[528,540,541],{},"{: .h3-font-size}",[528,543,544],{},"De kern van de aanval was geen geraffineerde exploit en geen zeroday-kwetsbaarheid, maar iets veel eenvoudigers en veel gangbaarders: een administratoraccount werd gecompromitteerd, en dat account had toegang tot Microsoft Intune.",[528,546,547],{},"Volgens berichten van BleepingComputer werden ongeveer 80.000 apparaten tussen 5:00 en 8:00 uur UTC gewist. Handala beweerde dat het aantal de 200.000 oversteeg, inclusief servers en mobiele apparaten in de wereldwijde operatie van het bedrijf in 79 landen. Een aanval die uitsluitend via een legitieme managementconsole werd uitgevoerd.",[535,549,551],{"id":550},"waarom-deze-aanval-slaagde","Waarom deze aanval slaagde",[528,553,541],{},[528,555,556],{},"Er zit een structureel probleem aan de wortel van dit incident dat niet specifiek is voor Stryker. Het geldt voor de meeste bedrijven.",[528,558,559],{},"De meeste organisaties behandelen administratieve taken en het dagelijkse werk als activiteiten die zonder problemen op hetzelfde apparaat onder dezelfde gebruikersidentiteit kunnen samenleven. Een IT-administrator beantwoordt e-mail, surft op internet, klikt af en toe op een link en beheert vanuit dezelfde sessie, op hetzelfde apparaat, cloudinfrastructuur, keurt toegangswijzigingen goed of raakt, zoals in dit geval, een apparaatbeheerconsole aan met de rechten om de volledige apparaatvloot te wissen.",[528,561,562],{},"Dat is het aanvalsoppervlak. Wanneer de alledaagse werkcontext en de privileged administratiecontext een gemeenschappelijk endpoint en een gemeenschappelijke identiteit delen, is elke compromittering van dat endpoint automatisch een compromittering van alles wat die identiteit kan bereiken. Phishing, credentialdiefstal via infostealer-malware, Adversary-in-the-Middle (AiTM) sessietokendiefstal, dat alles wordt een direct pad naar de krachtigste controls in de omgeving. Privilege-escalatie is niet nodig. De aanvaller gebruikt simpelweg wat er al is.",[528,564,565],{},"In het geval van Stryker omvatte die toegang een Intune-tenant die apparaten op zes continenten beheerde.",[535,567,569],{"id":568},"cisa-heeft-genoeg-gezien","CISA heeft genoeg gezien",[528,571,541],{},[528,573,574],{},"De omvang en de brutaliteit van de aanval leidden tot een ongebruikelijke reactie: CISA, de Amerikaanse Cybersecurity and Infrastructure Security Agency, publiceerde richtlijnen die direct het risico van gecompromitteerde apparaatbeheerplatformen adresseren. De dienst bevestigde dat ze de aanvalsvector kende en riep organisaties op concrete maatregelen te nemen, namelijk ervoor te zorgen dat risicovolle Intune-functies zoals het wissen van apparaten de goedkeuring van een tweede administrator vereisen voordat ze worden uitgevoerd.",[528,576,577],{},"Dat is een zeldzaam en betekenisvol signaal. Wanneer een federale veiligheidsdienst direct na een concreet incident gerichte richtlijnen uitgeeft, is de boodschap duidelijk: dit is geen randgeval. Dit is een patroon, en andere organisaties lopen met grote waarschijnlijkheid hetzelfde risico.",[535,579,581],{"id":580},"scheiding-is-geen-luxe-het-is-de-controle","Scheiding is geen luxe. Het is de controle.",[528,583,541],{},[528,585,586],{},"De Stryker-aanval laat scherp zien welke omvang een plat privilegemodel kan hebben. De aanvaller hoefde geen privileges te escaleren via een keten van kwetsbaarheden. Hij kreeg toegang tot inloggegevens of een sessietoken op één niveau en stelde vast dat dat niveau al voldoende was om catastrofale, wereldwijde, onomkeerbare schade aan te richten.",[528,588,589],{},"Het architectonische antwoord op dit probleem heeft een naam: het Microsoft Enterprise Access Model (EAM). Het kernprincipe is getrapte administratie: privileged operaties worden uitgevoerd met dedicated accounts en dedicated apparaten, strikt gescheiden van de alledaagse werkcontext. Deze least-privilege-aanpak betekent dat een gecompromitteerd productiviteitsaccount de managementlaag niet kan bereiken en dat een gecompromitteerd managementaccount geen control plane-operaties kan uitvoeren. Dat geldt evenzeer voor pure cloudomgevingen en voor hybride setups inclusief on-premises koppeling met Active Directory via Entra ID, waar een enkel overprivileged account nog altijd de cloud en het domein kan verbinden.",[528,591,592],{},"Het idee is eenvoudig. Administratief werk gebeurt op administratieve apparaten. De identiteit die wordt gebruikt om de Microsoft 365-tenant, de Intune-omgeving of de Azure-infrastructuur te beheren, is nooit dezelfde identiteit die wordt gebruikt om e-mail te lezen of aan Teams-calls deel te nemen. Het apparaat dat voor die administratieve sessies wordt gebruikt, is gehard, beperkt en geïsoleerd van het reguliere internetgebruik en van de productiviteitscontext die het aanvalsoppervlak creëert. Laterale beweging wordt structureel moeilijker, omdat er geen lateraal pad is.",[535,594,596],{"id":595},"twee-verdedigingslagen","Twee verdedigingslagen",[528,598,541],{},[528,600,601],{},"Om dit dreigingsmodel goed te adresseren, moet je op twee niveaus tegelijk werken: beveiligen wie de managementlaag en de bijbehorende inloggegevens kan aanraken, en harden hoe die managementlaag zelf wordt geconfigureerd en beheerd. Dat zijn niet hetzelfde probleem, en beide zijn belangrijk.",[528,603,604],{},[605,606],"img",{"alt":607,"src":608},"Risico- en productmapping voor het Stryker-aanvalsscenario: Managed Red Tenant adresseert identiteits- en toegangsrisico's, Managed Intune adresseert endpoint-managementrisico's","https://res.cloudinary.com/c4a8/image/upload/v1774005366/blog/pics/stryker_risk_product_mapping.svg",[610,611,613],"h3",{"id":612},"managed-red-tenant-de-administratieve-context-beschermen","Managed Red Tenant: de administratieve context beschermen",[528,615,616],{},"{: .h4-font-size}",[528,618,619,620,623],{},"De eerste laag is de volledige isolatie van privileged toegang. Daarvoor is onze ",[621,622,250],"a",{"href":251}," ontworpen.",[528,625,626],{},"De Managed Red Tenant biedt een volledig geïsoleerde, cloudgebaseerde administratieve omgeving, een dedicated Microsoft Entra-tenant (“de Red Tenant”) die uitsluitend voor privileged operaties wordt gebruikt. Administratieve identiteiten leven hier. Administratieve apparaten worden hier beheerd. Niets uit de reguliere werkomgeving vloeit hierheen over.",[528,628,629],{},"Voor de meest kritische rollen, die met control plane-toegang zoals Global Administrators, implementeren we de “Clean Keyboard”-aanpak: een fysieke Privileged Admin Workstation (PAW) met dedicated hardware, geharde policies en geen enkel raakpunt met de alledaagse werkcontext. Voor administratieve rollen onder de control plane bieden we schaalbare Virtual Access Workstations (VAW) aan, gebouwd op een geharde Azure Virtual Desktop-infrastructuur binnen de Red Tenant. Het toegangspad zelf is beschermd door Microsoft Entra Private Access, met Zero Trust Network Access en Conditional Access-policies voordat een sessie tot stand kan komen.",[528,631,632],{},"Microsoft Entra Internet Access blokkeert publieke internettoegang vanuit administratieve sessies en beperkt de verbindingen strikt tot privileged interfaces en geautoriseerde tenantomgevingen. Sessies kunnen vrijwel in realtime worden ingetrokken via Universal Conditional Access Evaluation, wat betekent dat een ingetrokken credential niet als geldige sessie blijft bestaan.",[528,634,635,636,639],{},"De Managed Red Tenant wordt rond de klok gemonitord door ons ",[621,637,638],{"href":276},"Cloud Security Operations Center (CSOC)",", met speciaal ontwikkelde detecties die gericht zijn op administratieve rechten en toegangspatronen. Een aanvaller die op de een of andere manier een credential in deze omgeving compromitteert, zou geen drie onopgemerkte uren hebben om wipe-commando's over een wereldwijde apparaatvloot uit te voeren.",[528,641,642],{},"Dat is bijzonder relevant voor rollen zoals Intune-administrators. Zij weten hoe je clients beveiligt, maar het beveiligen van een privileged admin workstation vraagt andere vaardigheden: Enterprise Access Architecture, identity hardening, Zero Trust controls. Die liggen doorgaans bij het securityteam. Een Managed Red Tenant neemt die last volledig weg: Intune-admins krijgen een professioneel beheerde, consistent geharde workstation, zonder zelf expert in security workstations te hoeven worden. Dat geldt voor elke hooggeprivilegieerde rol in de organisatie.",[644,645],"video-frame",{"thumb":646,"alt":647,"id":648,":full-width":649},"/thumbs/thumb-managed-red-tenant.jpg","Jan Geisbauer en Thomas Naunheim bespreken de Managed Red Tenant-cybersecuritystrategie","rOEIvItNkjE","true",[651,652,654,655],"div",{"style":653},"background:var(--color-gk-light-grey); margin-top:0.5rem; padding:0.5rem 1rem; font-size:0.85rem; color:var(--color-gk-dark-blue)","Meer op ons ",[621,656,660],{"href":657,"target":330,"rel":658},"https://www.youtube.com/playlist?list=PLPxBXiOFJRHelegu_B-uZAyz2UrOSxioL",[659],"noopener","YouTube-kanaal",[610,662,664],{"id":663},"managed-intune-de-managementlaag-zelf-beveiligen","Managed Intune: de managementlaag zelf beveiligen",[528,666,616],{},[528,668,669,670,672],{},"De tweede laag is ervoor zorgen dat Intune, de tool die bij de Stryker-aanval als wapen werd ingezet, volgens de hoogste securitystandaard wordt geconfigureerd, beheerd en continu onderhouden. Daarvoor is onze ",[621,671,35],{"href":36},"-service verantwoordelijk.",[528,674,675],{},"Een van de centrale inzichten uit incidenten als dit is dat organisaties vaak Intune-omgevingen erven die organisch zijn gegroeid: policies op policies gestapeld, manuele wijzigingen via het portal die moeilijk te controleren zijn, en security baselines die geen gelijke tred hebben gehouden met Microsofts eigen, zich ontwikkelende aanbevelingen. Precies dat soort omgeving is waar configuratiedrift misbruikbare gaten creëert.",[528,677,678,679,685],{},"Microsoft heeft recent ",[621,680,684],{"href":681,"rel":682},"https://techcommunity.microsoft.com/blog/intunecustomersuccess/best-practices-for-securing-microsoft-intune/4502117",[683],"nofollow","best practices voor het beveiligen van Microsoft Intune"," gepubliceerd, een signaal dat ook Microsoft Intune-hardening beschouwt als een onderwerp dat branchebreed expliciete aandacht vraagt. Onze Managed Intune-service is op deze principes gebaseerd, en we hebben Microsofts aanbevelingen als onderdeel van onze baseline geïmplementeerd.",[528,687,688],{},"Onze Managed Intune-service is gebaseerd op de glueckkanja Intune Foundation: een bewezen, continu onderhouden set best practices voor apparaatbeheer, volledig als code uitgerold met Terraform en onze eigen TerraProvider. Elke wijziging is geautomatiseerd, versiebeheerd en controleerbaar. Er zijn geen ongedocumenteerde click-through-configuraties die een aanvaller zou kunnen misbruiken door het gat te begrijpen tussen wat bedoeld was en wat daadwerkelijk is ingesteld.",[528,690,691],{},"Vanuit securityperspectief betekent dat dat Zero Trust, App Protection Policies en Endpoint Security-configuraties by design consistent worden toegepast, over Windows, macOS, iOS en Android, niet als eenmalige uitrol, maar als continu gehandhaafde, doorlopend bijgewerkte baselines die Microsofts eigen securityrichtlijnen volgen.",[528,693,694],{},"Beslissend is dat Managed Intune de operationele volwassenheid weerspiegelt die modern endpoint management vereist: continue compliance-monitoring, gestructureerde change governance en regelmatige service reviews, niet als optionele extra's, maar als baseline-operaties. Maar de Intune-configuratie beveiligen is pas de helft van het werk. Wanneer de administrator die de console benadert dat doet vanaf een onbeschermd apparaat, blijft de managementlaag alsnog blootgesteld, en precies hier maakt de Managed Red Tenant het model compleet.",[528,696,697],{},"Omdat alle configuratie als code op basis van de Intune Foundation wordt uitgerold, handhaven we een strikt vierogenprincipe met peer review, aanvullende geautomatiseerde validatie en gecontroleerde deploymentpipelines. Dat elimineert onbeheerde portalwijzigingen binnen de Intune Foundation en zorgt voor een consistente, controleerbare en veilige baseline over alle apparaten heen.",[528,699,700],{},"Administratieve toegang wordt gestuurd via een least-privilege-model met GDAP en Azure Lighthouse, met duidelijk gedefinieerde verantwoordelijkheden en strak begrensde toegang tot de klanttenant. Dat verkleint het aanvalsoppervlak dat met privileged operaties samenhangt aanzienlijk.",[528,702,703],{},"Acties op apparaatniveau, inclusief destructieve operaties, blijven de verantwoordelijkheid van de klant, omdat de uitvoering ervan nauw samenhangt met organisatiespecifieke processen en interne governanceframeworks. Microsoft en CISA raden aan zulke acties met aanvullende maatregelen te beveiligen, bijvoorbeeld met multi-admin approval controls in Intune.",[535,705,707],{"id":706},"de-ongemakkelijke-vraag","De ongemakkelijke vraag",[528,709,541],{},[528,711,712],{},"De Stryker-aanval is geen aanklacht tegen Microsoft Intune. Intune gedroeg zich precies zoals het is ontworpen. Het voerde de commando's uit die het van een geauthenticeerde administrator kreeg. Het falen zat niet in de tool. Het zat in het ontbreken van controls over wie die tool kon bereiken, vanuit welke context en met welke mate van autorisatie.",[528,714,715],{},"Dat is een governance- en architectuurprobleem. En het is hetzelfde probleem dat in de meeste organisaties bestaat die vandaag Microsoft 365 gebruiken.",[528,717,718],{},"Als jullie administrators Intune, Entra ID of Azure benaderen vanaf dezelfde apparaten en identiteiten die ze voor het dagelijkse werk gebruiken, en als jullie Intune-omgeving door jaren van manuele portalwijzigingen is gegroeid in plaats van via een gestructureerd, geautomatiseerd operatiemodel, dan draag je hetzelfde structurele risico dat Stryker op 11 maart droeg. De vraag is of een aanvaller die zwakke plek vindt voordat jullie hem dichten.",[528,720,721,723,724,726],{},[621,722,250],{"href":251}," adresseert de privilege- en identiteitslaag. ",[621,725,35],{"href":36}," adresseert de configuratie- en operatielaag. Samen dichten ze de twee gaten die de Stryker-aanval mogelijk hebben gemaakt.",[528,728,729],{},"Wil je begrijpen hoe een van deze services op jullie huidige omgeving van toepassing is of waar jullie concrete zwakke plekken liggen, dan praten we daar graag over.",[528,731,732],{},"We publiceren binnenkort ook een deep-dive-artikel dat onderzoekt hoe het Stryker-incident in de eerste plaats mogelijk kon zijn.",[535,734,736],{"id":735},"meer-informatie","Meer informatie",[528,738,541],{},[740,741,742,750,756,763],"ul",{},[743,744,745],"li",{},[621,746,749],{"href":747,"rel":748},"https://www.cisa.gov/secure-cloud-business-applications",[683],"CISA: Securing Cloud Business Applications",[743,751,752],{},[621,753,755],{"href":681,"rel":754},[683],"Microsoft: best practices voor het beveiligen van Microsoft Intune",[743,757,758],{},[621,759,762],{"href":760,"rel":761},"https://techcrunch.com/2026/03/19/cisa-urges-companies-to-secure-microsoft-intune-systems-after-hackers-mass-wipe-stryker-devices/?utm_campaign=social",[683],"TechCrunch: CISA roept bedrijven op Microsoft Intune-systemen te beveiligen nadat hackers massaal Stryker-apparaten hebben gewist",[743,764,765],{},[621,766,769],{"href":767,"rel":768},"https://marketplace.microsoft.com/de-de/product/saas/glueckkanja-gabag.redtenant?tab=overview",[683],"Managed Red Tenant in de Azure Marketplace",{"title":771,"searchDepth":772,"depth":772,"links":773},"",2,[774,775,776,777,778,783,784],{"id":537,"depth":772,"text":538},{"id":550,"depth":772,"text":551},{"id":568,"depth":772,"text":569},{"id":580,"depth":772,"text":581},{"id":595,"depth":772,"text":596,"children":779},[780,782],{"id":612,"depth":781,"text":613},3,{"id":663,"depth":781,"text":664},{"id":706,"depth":772,"text":707},{"id":735,"depth":772,"text":736},"md","post",{"lang":788,"seoTitle":789,"titleClass":790,"date":791,"categories":792,"blogtitlepic":793,"socialimg":794,"customExcerpt":795,"keywords":796,"asideNav":797,"contactInContent":812,"maxContent":484,"published":325},"nl","De Stryker-aanval: hoe één gecompromitteerd adminaccount 80.000 apparaten via Intune wiste","h2-font-size","2026-03-20",[235],"head-stryker.jpg","/blog/heads/head-stryker.jpg","Op 11 maart 2026 wiste Handala apparaten in 79 landen, en alles wat daarvoor nodig was, was één gecompromitteerd Intune-adminaccount. Geen malware, geen exploit, alleen legitieme managementtools die tegen hun eigenaars werden gericht. Wat er is gebeurd, waarom het werkte en welke twee architectonische gaten gedicht moeten worden.","Stryker-aanval, Handala, Microsoft Intune wipe, Privileged Access Management, admin-workstation, Managed Red Tenant, Managed Intune, Zero Trust, Privileged Admin Workstation, PAW, Enterprise Access Model, CISA, endpoint management security",{"menuItems":798},[799,801,803,805,808,810],{"href":800,"text":538},"#wat-er-werkelijk-is-gebeurd",{"href":802,"text":551},"#waarom-deze-aanval-slaagde",{"href":804,"text":569},"#cisa-heeft-genoeg-gezien",{"href":806,"text":807},"#scheiding-is-geen-luxe-het-is-de-controle","Scheiding is geen luxe",{"href":809,"text":596},"#twee-verdedigingslagen",{"href":811,"text":707},"#de-ongemakkelijke-vraag",{"quote":325,"infos":813},{"bgColor":814,"headline":815,"subline":816,"level":535,"textStyling":817,"flush":818,"person":819,"form":824},"var(--color-gk-dark-blue)","Neem contact op","Wil je weten hoe Managed Red Tenant en Managed Intune de gaten dichten die de Stryker-aanval heeft misbruikt? Vul het formulier in, dan leggen we uit hoe het op jullie omgeving van toepassing is.","text-light","justify-content-end",{"image":820,"cloudinary":325,"alt":821,"name":523,"quotee":523,"quoteeTitle":822,"quote":823},"/people/people-jan-geisbauer-csoc.jpg","Portret van Jan Geisbauer, Head of Security bij glueckkanja","Head of Security","De tool deed exact wat hem werd opgedragen. Het probleem was dat niemand in staat had mogen zijn om hem dat op te dragen, niet vanaf een gecompromitteerd dagelijks account, niet zonder een tweede goedkeuring, niet zonder een geïsoleerde administratieve omgeving. Dat is het gat dat we organisaties helpen dichten.",{"ctaText":825,"cta":826,"method":786,"action":828,"fields":829},"Verzenden",{"skin":827},"primary on-surface","/send",[830,834,839,842,846,851,856,858,861,864,867,869],{"type":831,"id":832,"value":833},"hidden","_next","successful",{"label":835,"type":836,"id":837,"required":325,"requiredMsg":838},"Naam*","text","name","Vul je naam in.",{"label":840,"type":836,"id":403,"required":325,"requiredMsg":841},"Bedrijf*","Vul je bedrijf in.",{"label":843,"type":844,"id":844,"required":325,"requiredMsg":845},"E-mailadres*","email","Vul je e-mailadres in.",{"label":847,"type":848,"id":849,"required":484,"requiredMsg":850},"Jouw bericht aan ons","textarea","message","Vul een bericht in.",{"label":852,"type":853,"id":854,"required":325,"requiredMsg":855},"Je gegevens worden opgeslagen en gebruikt om je aanvraag te behandelen. Details vind je in onze \u003Ca href=\"/nl/privacy\">privacyverklaring\u003C/a>.","checkbox","dataprotection","Graag bevestigen",{"type":831,"id":857,"value":235},"_topic",{"type":831,"id":859,"value":860},"_location","World",{"type":831,"id":862,"value":863},"_subject","Form: Blog Stryker Attack Intune Privilege | NL",{"type":831,"id":865,"value":866},"inbox_key","gkgab-contact-form",{"type":831,"id":868},"_gotcha",{"type":831,"id":870},"jsonData","/posts/2026-03-20-stryker-attack-intune-privilege",{"title":521,"description":530},"posts/2026-03-20-stryker-attack-intune-privilege",[71,875,876],"Privileged Access","Zero Trust","96OZBg2DPiEhr62n7bnwNZnz56_pQTcKKAoFHWY3f14",{"id":879,"extension":880,"meta":881,"stem":8,"__hash__":1230},"authors_data/authors.json","json",{"path":882,"Fritz Zurhorst":883,"Alexander Schlindwein":889,"Sophie Luna":895,"Nadine Klein":903,"Karsten Kleinschmidt":909,"Julian Wendt":917,"Holger Bunkradt":922,"Ralf Mania":928,"Oliver Kieselbach":934,"Steffen Schwerdtfeger":940,"Gunnar Winter":948,"Jan Petersen":953,"Thorsten Kunzi":958,"Moritz Pohl":962,"Thorben Pöschus":967,"Christoph Hannebauer":973,"Marco Scheel":977,"Christopher Brumm":982,"Florian Klante":989,"Niklas Bachmann":994,"Nils Krautkrämer":999,"Patrick Treptau":1005,"Peter Beckendorf":1010,"Patrick Sobau":1015,"Jörg Wunderlich":1020,"Michael Breither":1024,"Christian Kanja":1029,"Zeba Hoffmann":1035,"Jochen Fröhlich":1040,"Jan Geisbauer":1044,"Gerrit Reinke":1054,"Christian Kordel":1060,"Stephan Wälde":1064,"Carolin Kanja":1069,"Adrian Ritter":1075,"Marvin Bangert":1080,"Thorsten Pickhan":1086,"Christian Lorenz":1092,"Denis Böhm":1097,"Fabian Bader":1102,"Juan Jose Fernandez Perez":1108,"Mahschid Sayyar":1113,"Benjamin Dassow":1118,"Markus Walschburger":1123,"Jonathan Haist":1128,"Daniel Rohregger":1133,"Thomas Naunheim":1138,"Florian Stöckl":1143,"Pascal Asch":1148,"Markus Kättner":1153,"Anna Ulbricht":1160,"Annette Brauns":1167,"body":1173,"title":1229},"/authors",{"display_name":884,"avatar":885,"permalink":886,"linkedin":887,"imageOffsetTop":888},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":890,"avatar":891,"permalink":892,"twitter":893,"linkedin":894},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":896,"avatar":897,"permalink":898,"twitter":899,"linkedin":900,"imageOffsetLeft":901,"imageOffsetTop":902},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":904,"avatar":905,"permalink":906,"twitter":907,"linkedin":908,"imageOffsetTop":888},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":910,"avatar":911,"permalink":912,"twitter":913,"linkedin":914,"imageOffsetTop":915,"imageOffsetLeft":916},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":918,"avatar":919,"permalink":920,"linkedin":921},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":923,"avatar":924,"permalink":925,"linkedin":926,"twitter":927},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":929,"avatar":930,"permalink":931,"linkedin":932,"twitter":933},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":935,"avatar":936,"permalink":937,"linkedin":938,"twitter":939},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":941,"avatar":942,"permalink":943,"linkedin":944,"twitter":945,"imageOffsetTop":946,"imageOffsetLeft":947},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":949,"avatar":950,"permalink":951,"twitter":899,"linkedin":952},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":954,"avatar":955,"permalink":956,"twitter":899,"linkedin":957},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":959,"avatar":960,"permalink":961,"twitter":899,"linkedin":952,"imageOffsetTop":888},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":963,"avatar":964,"permalink":965,"twitter":899,"linkedin":966},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":968,"avatar":969,"permalink":970,"twitter":971,"linkedin":972},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":974,"avatar":975,"permalink":976,"twitter":899,"linkedin":952,"imageOffsetTop":888},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":978,"avatar":979,"permalink":980,"twitter":981,"linkedin":981},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":983,"avatar":984,"permalink":985,"twitter":986,"linkedin":987,"imageOffsetTop":988},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":990,"avatar":991,"permalink":992,"linkedin":993,"twitter":899},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":995,"avatar":996,"permalink":997,"linkedin":998,"twitter":899},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1000,"avatar":1001,"permalink":1002,"twitter":1003,"linkedin":1004},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1006,"avatar":1007,"permalink":1008,"linkedin":1009,"twitter":899},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1011,"avatar":1012,"permalink":1013,"linkedin":1014,"twitter":899,"imageOffsetTop":888},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1016,"avatar":1017,"permalink":1018,"linkedin":1019,"twitter":899},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1021,"avatar":1022,"permalink":1023,"twitter":899},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1025,"avatar":1026,"permalink":1027,"twitter":899,"linkedin":1028},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1030,"avatar":1031,"permalink":1032,"twitter":1033,"linkedin":1034},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1036,"avatar":1037,"permalink":1038,"linkedin":1039,"twitter":899},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1041,"avatar":1042,"permalink":1043,"twitter":899,"linkedin":952},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":523,"avatar":1045,"permalink":1046,"twitter":1047,"linkedin":1047,"imageOffsetTop":888,"socials":1048},"people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1049,1051],{"text":472,"href":1050},"https://emptydc.com",{"text":1052,"href":1053},"Podcast","https://hairlessinthecloud.com",{"display_name":1055,"avatar":1056,"permalink":1057,"twitter":1058,"linkedin":1059},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1061,"avatar":1062,"permalink":1063,"twitter":899,"linkedin":952},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1065,"avatar":1066,"permalink":1067,"twitter":1068,"linkedin":952},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1070,"avatar":1071,"permalink":1072,"twitter":1073,"linkedin":1074},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1076,"avatar":1077,"permalink":1078,"twitter":1079,"linkedin":1079},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1081,"avatar":1082,"permalink":1083,"twitter":1084,"linkedin":1085},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1087,"avatar":1088,"permalink":1089,"twitter":1090,"linkedin":1091},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1093,"avatar":1094,"permalink":1095,"linkedin":1096,"twitter":899},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1098,"avatar":1099,"permalink":1100,"linkedin":1101,"twitter":899},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1103,"avatar":1104,"permalink":1105,"linkedin":1106,"twitter":1107},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1109,"avatar":1110,"permalink":1111,"linkedin":1112},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1114,"avatar":1115,"permalink":1116,"linkedin":1117},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1119,"avatar":1120,"permalink":1121,"linkedin":1122},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1124,"avatar":1125,"permalink":1126,"linkedin":1127},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1129,"avatar":1130,"permalink":1131,"linkedin":1132,"imageOffsetTop":888},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1134,"avatar":1135,"permalink":1136,"linkedin":1137,"imageOffsetTop":888},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1139,"avatar":1140,"permalink":1141,"linkedin":1142,"imageOffsetTop":988},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1144,"avatar":1145,"permalink":1146,"linkedin":1147,"imageOffsetTop":988},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1149,"avatar":1150,"permalink":1151,"linkedin":1152,"imageOffsetTop":988},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1154,"avatar":1155,"permalink":1156,"linkedin":1157,"imageOffsetTop":1158,"imageOffsetLeft":1159},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1161,"avatar":1162,"permalink":1163,"linkedin":1164,"imageOffsetTop":1165,"imageOffsetLeft":1166},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1168,"avatar":1169,"permalink":1170,"linkedin":1171,"imageOffsetTop":1172,"imageOffsetLeft":915},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1174,"Alexander Schlindwein":1175,"Sophie Luna":1176,"Nadine Klein":1177,"Karsten Kleinschmidt":1178,"Julian Wendt":1179,"Holger Bunkradt":1180,"Ralf Mania":1181,"Oliver Kieselbach":1182,"Steffen Schwerdtfeger":1183,"Gunnar Winter":1184,"Jan Petersen":1185,"Thorsten Kunzi":1186,"Moritz Pohl":1187,"Thorben Pöschus":1188,"Christoph Hannebauer":1189,"Marco Scheel":1190,"Christopher Brumm":1191,"Florian Klante":1192,"Niklas Bachmann":1193,"Nils Krautkrämer":1194,"Patrick Treptau":1195,"Peter Beckendorf":1196,"Patrick Sobau":1197,"Jörg Wunderlich":1198,"Michael Breither":1199,"Christian Kanja":1200,"Zeba Hoffmann":1201,"Jochen Fröhlich":1202,"Jan Geisbauer":1203,"Gerrit Reinke":1207,"Christian Kordel":1208,"Stephan Wälde":1209,"Carolin Kanja":1210,"Adrian Ritter":1211,"Marvin Bangert":1212,"Thorsten Pickhan":1213,"Christian Lorenz":1214,"Denis Böhm":1215,"Fabian Bader":1216,"Juan Jose Fernandez Perez":1217,"Mahschid Sayyar":1218,"Benjamin Dassow":1219,"Markus Walschburger":1220,"Jonathan Haist":1221,"Daniel Rohregger":1222,"Thomas Naunheim":1223,"Florian Stöckl":1224,"Pascal Asch":1225,"Markus Kättner":1226,"Anna Ulbricht":1227,"Annette Brauns":1228},{"display_name":884,"avatar":885,"permalink":886,"linkedin":887,"imageOffsetTop":888},{"display_name":890,"avatar":891,"permalink":892,"twitter":893,"linkedin":894},{"display_name":896,"avatar":897,"permalink":898,"twitter":899,"linkedin":900,"imageOffsetLeft":901,"imageOffsetTop":902},{"display_name":904,"avatar":905,"permalink":906,"twitter":907,"linkedin":908,"imageOffsetTop":888},{"display_name":910,"avatar":911,"permalink":912,"twitter":913,"linkedin":914,"imageOffsetTop":915,"imageOffsetLeft":916},{"display_name":918,"avatar":919,"permalink":920,"linkedin":921},{"display_name":923,"avatar":924,"permalink":925,"linkedin":926,"twitter":927},{"display_name":929,"avatar":930,"permalink":931,"linkedin":932,"twitter":933},{"display_name":935,"avatar":936,"permalink":937,"linkedin":938,"twitter":939},{"display_name":941,"avatar":942,"permalink":943,"linkedin":944,"twitter":945,"imageOffsetTop":946,"imageOffsetLeft":947},{"display_name":949,"avatar":950,"permalink":951,"twitter":899,"linkedin":952},{"display_name":954,"avatar":955,"permalink":956,"twitter":899,"linkedin":957},{"display_name":959,"avatar":960,"permalink":961,"twitter":899,"linkedin":952,"imageOffsetTop":888},{"display_name":963,"avatar":964,"permalink":965,"twitter":899,"linkedin":966},{"display_name":968,"avatar":969,"permalink":970,"twitter":971,"linkedin":972},{"display_name":974,"avatar":975,"permalink":976,"twitter":899,"linkedin":952,"imageOffsetTop":888},{"display_name":978,"avatar":979,"permalink":980,"twitter":981,"linkedin":981},{"display_name":983,"avatar":984,"permalink":985,"twitter":986,"linkedin":987,"imageOffsetTop":988},{"display_name":990,"avatar":991,"permalink":992,"linkedin":993,"twitter":899},{"display_name":995,"avatar":996,"permalink":997,"linkedin":998,"twitter":899},{"display_name":1000,"avatar":1001,"permalink":1002,"twitter":1003,"linkedin":1004},{"display_name":1006,"avatar":1007,"permalink":1008,"linkedin":1009,"twitter":899},{"display_name":1011,"avatar":1012,"permalink":1013,"linkedin":1014,"twitter":899,"imageOffsetTop":888},{"display_name":1016,"avatar":1017,"permalink":1018,"linkedin":1019,"twitter":899},{"display_name":1021,"avatar":1022,"permalink":1023,"twitter":899},{"display_name":1025,"avatar":1026,"permalink":1027,"twitter":899,"linkedin":1028},{"display_name":1030,"avatar":1031,"permalink":1032,"twitter":1033,"linkedin":1034},{"display_name":1036,"avatar":1037,"permalink":1038,"linkedin":1039,"twitter":899},{"display_name":1041,"avatar":1042,"permalink":1043,"twitter":899,"linkedin":952},{"display_name":523,"avatar":1045,"permalink":1046,"twitter":1047,"linkedin":1047,"imageOffsetTop":888,"socials":1204},[1205,1206],{"text":472,"href":1050},{"text":1052,"href":1053},{"display_name":1055,"avatar":1056,"permalink":1057,"twitter":1058,"linkedin":1059},{"display_name":1061,"avatar":1062,"permalink":1063,"twitter":899,"linkedin":952},{"display_name":1065,"avatar":1066,"permalink":1067,"twitter":1068,"linkedin":952},{"display_name":1070,"avatar":1071,"permalink":1072,"twitter":1073,"linkedin":1074},{"display_name":1076,"avatar":1077,"permalink":1078,"twitter":1079,"linkedin":1079},{"display_name":1081,"avatar":1082,"permalink":1083,"twitter":1084,"linkedin":1085},{"display_name":1087,"avatar":1088,"permalink":1089,"twitter":1090,"linkedin":1091},{"display_name":1093,"avatar":1094,"permalink":1095,"linkedin":1096,"twitter":899},{"display_name":1098,"avatar":1099,"permalink":1100,"linkedin":1101,"twitter":899},{"display_name":1103,"avatar":1104,"permalink":1105,"linkedin":1106,"twitter":1107},{"display_name":1109,"avatar":1110,"permalink":1111,"linkedin":1112},{"display_name":1114,"avatar":1115,"permalink":1116,"linkedin":1117},{"display_name":1119,"avatar":1120,"permalink":1121,"linkedin":1122},{"display_name":1124,"avatar":1125,"permalink":1126,"linkedin":1127},{"display_name":1129,"avatar":1130,"permalink":1131,"linkedin":1132,"imageOffsetTop":888},{"display_name":1134,"avatar":1135,"permalink":1136,"linkedin":1137,"imageOffsetTop":888},{"display_name":1139,"avatar":1140,"permalink":1141,"linkedin":1142,"imageOffsetTop":988},{"display_name":1144,"avatar":1145,"permalink":1146,"linkedin":1147,"imageOffsetTop":988},{"display_name":1149,"avatar":1150,"permalink":1151,"linkedin":1152,"imageOffsetTop":988},{"display_name":1154,"avatar":1155,"permalink":1156,"linkedin":1157,"imageOffsetTop":1158,"imageOffsetLeft":1159},{"display_name":1161,"avatar":1162,"permalink":1163,"linkedin":1164,"imageOffsetTop":1165,"imageOffsetLeft":1166},{"display_name":1168,"avatar":1169,"permalink":1170,"linkedin":1171,"imageOffsetTop":1172,"imageOffsetLeft":915},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1232,"authors":1438},[1233,1250,1264,1276,1292,1305,1318,1331,1343,1359,1373,1388,1406,1417,1422],{"id":1234,"title":1235,"author":1236,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1237,"moment":1242,"path":1243,"stem":1244,"tags":1245,"webcast":484},"content_nl/posts/2026-09-22-end-of-mfa-sms.md","Het einde van de MFA-sms",[910],{"lang":788,"date":1238,"categories":1239,"blogtitlepic":1240,"customExcerpt":1241},"2026-09-21",[235],"head-conditional-access.jpg","Waarom organisaties nu moeten overstappen op phishingresistente en zo veel mogelijk wachtwoordloze aanmeldmethoden.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[235,1246,1247,1248,1249],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1251,"title":1252,"author":1253,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1254,"moment":1238,"path":1258,"stem":1259,"tags":1260,"webcast":484},"content_nl/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Als de gebruiker de exploit is, en hoe jullie dat stoppen",[884,904],{"lang":788,"date":1238,"categories":1255,"blogtitlepic":1256,"customExcerpt":1257},[235],"head-clickfix.jpg","ClickFix maakt gebruikers tot hun eigen aanvaller: een vals CAPTCHA, een copy-paste, en schadelijke code draait in het geheugen zonder dat er iets op de schijf landt. Hoe Microsoft Defender de aanval detecteert, waar de detectie tegen grenzen aanloopt en hoe jullie het gat dichten met een RunMRU-hunt en vier beschermingslagen.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1261,1262,1263],"Defender","SOC","Endpoint Security",{"id":1265,"title":1266,"author":1267,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1268,"moment":1238,"path":1272,"stem":1273,"tags":1274,"webcast":484},"content_nl/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin en dagelijks werk op één computer? Game Over.",[523],{"lang":788,"date":1238,"categories":1269,"blogtitlepic":1270,"customExcerpt":1271},[235],"head-game-over-en.jpg","Waarom één tenant voor CIO's niet volstaat, en de tweede zelden wordt meegedacht. De Managed Red Tenant scheidt administratief werk architectonisch van de office-omgeving, de Managed Dark Tenant houdt de organisatie handelingsbekwaam wanneer de verdediging toch valt. Wat dat betekent voor het bedrijfsmodel, het SOC-signaal en de aantoonplichten volgens NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[235,875,876,1275],"NIS2",{"id":1277,"title":1278,"author":1279,"cta":494,"description":1280,"hideInRecent":484,"layout":786,"meta":1281,"moment":1282,"path":1287,"stem":1288,"tags":1289,"webcast":484},"content_nl/posts/2026-08-08-isg-germany-2026.md","Vier keer Leader. glueckkanja in de ISG-studie Duitsland 2026",[1070],"ISG heeft zijn studie dit jaar een andere naam gegeven. Van het Microsoft Cloud Ecosystem werd het Microsoft AI and Cloud Ecosystem, en met de naam is de maatstaf verschoven: beoordeeld wordt niet meer wie Microsoft-platformen invoert, maar wie Copilot, agents en AI-workloads beheersbaar draait. Aan onze positie heeft de nieuwe maatstaf niets veranderd. De ISG Provider Lens®-studie Duitsland 2026 positioneert ons als Leader in vier kwadranten: Microsoft Productivity and Business Process Services en Azure Managed Services, telkens in de Large Market en in de Mid Market. Na 2021, 2023, 2024 en 2025 is het de vijfde Leader-inschaling in Duitsland, in Zwitserland kwam de sprong naar het Leader-kwadrant twee weken eerder.",{"lang":788,"date":1282,"categories":1283,"blogtitlepic":1285,"customExcerpt":1286},"2026-08-08",[1284],"Corporate","head-isg-de-2026.png","De ISG Provider Lens®-studie 2026 positioneert glueckkanja in Duitsland als Leader in vier kwadranten: Microsoft Productivity and Business Process Services en Azure Managed Services, telkens in de Large en in de Mid Market. De studie heet nu Microsoft AI and Cloud Ecosystem, en de maatstaf is verschoven: beoordeeld wordt wie AI- en agent-workloads beheersbaar draait.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1290,1291],"Award","ISG",{"id":1293,"title":1294,"author":1295,"cta":494,"description":1296,"hideInRecent":484,"layout":786,"meta":1297,"moment":1298,"path":1302,"stem":1303,"tags":1304,"webcast":484},"content_nl/posts/2026-07-31-isg-switzerland-2026.md","Van Rising Star naar Leader. glueckkanja in de ISG-studie Zwitserland 2026",[1070],"In 2024 hebben we glueckkanja Switzerland AG opgericht en in het zentroom aan de Bahnhofplatz 10b in Bern een kantoor betrokken. In 2025 heeft ISG ons in de Zwitserse markt als Rising Star ingeschaald, als de aanbieder van wie de analisten de sprong naar het Leader-kwadrant verwachten. Nu is die sprong gedocumenteerd: de ISG Provider Lens®-studie 2026 positioneert ons in Zwitserland als Leader in het kwadrant Microsoft AI and Cloud Ecosystem, op de gebieden Azure Managed Services en Microsoft Productivity and Business Process Services.",{"lang":788,"date":1298,"categories":1299,"blogtitlepic":1300,"customExcerpt":1301},"2026-07-31",[1284],"head-isg-ch-2026.png","De ISG Provider Lens®-studie 2026 positioneert glueckkanja in Zwitserland als Leader in het kwadrant Microsoft AI and Cloud Ecosystem, op de gebieden Azure Managed Services en Microsoft Productivity and Business Process Services. Twee jaar na de markttoetreding in Bern, een jaar na de Rising-Star-onderscheiding.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1290,1291],{"id":1306,"title":1307,"author":1308,"cta":494,"description":771,"hideInRecent":484,"layout":786,"meta":1309,"moment":1310,"path":1314,"stem":1315,"tags":1316,"webcast":484},"content_nl/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Wat het OpenAI/Hugging-Face-incident verraadt en wat niet",[523],{"lang":788,"date":1310,"categories":1311,"blogtitlepic":1312,"customExcerpt":1313},"2026-07-24",[235],"head-outbreak.jpg","Een AI-agent breekt uit zijn testomgeving, vindt een zero-day en hackt een ander bedrijf. Klinkt als een scenario, maar is in juli 2026 daadwerkelijk gebeurd. Tijd voor een nuchtere plaatsbepaling: met wat psychologie, twee securityveteranen en de vraag wat dit voor jullie verdediging betekent.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1317,1262,876],"AI",{"id":1319,"title":1320,"author":1321,"cta":494,"description":1322,"hideInRecent":484,"layout":786,"meta":1323,"moment":1324,"path":1328,"stem":1329,"tags":1330,"webcast":484},"content_nl/posts/2026-07-22-isg-cybersecurity-2026.md","Leader en Rising Star. glueckkanja in de ISG Cybersecurity-studie 2026",[1070],"Nieuw in het kwadrant en meteen Leader: de ISG Provider Lens®-studie \"Cybersecurity – Services and Solutions 2026\" positioneert glueckkanja als Leader op het gebied van Next-Gen SOC/MDR Services voor de Duitse midmarket. In de totale markt voor Next-Gen SOC/MDR Services onderscheidt ISG ons als Rising Star, dus als de aanbieder van wie de analisten de sprong naar het Leader-kwadrant binnen de komende 12 tot 24 maanden verwachten.",{"lang":788,"date":1324,"categories":1325,"blogtitlepic":1326,"customExcerpt":1327},"2026-07-22",[1284],"head-isg-cybersecurity-2026.png","De ISG Provider Lens®-studie Cybersecurity 2026 onderscheidt glueckkanja als Leader in het kwadrant Next-Gen SOC/MDR Services (Midmarket). In de totale markt voor Next-Gen SOC/MDR Services zijn we Rising Star. ISG schrijft ons bovengemiddelde groei toe, diepgaande Microsoft-securityexpertise en een 24/7 SOC vanuit Duitsland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1290,1291,235],{"id":1332,"title":1333,"author":1334,"cta":494,"description":1335,"hideInRecent":484,"layout":786,"meta":1336,"moment":1337,"path":1340,"stem":1341,"tags":1342,"webcast":484},"content_nl/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: wat AI echt nodig heeft om te werken",[1070],"Een productiebedrijf wil weten welke van zijn 14.000 SKU's daadwerkelijk winstgevend zijn. Het antwoord ligt in drie systemen die nog nooit één enkel datapunt met elkaar hebben uitgewisseld. Tot voor kort kostte het drie afdelingen, twee weken en de nodige goede wil om dat antwoord te krijgen. Sinds begin 2026 kan een AI die vraag in minuten beantwoorden: de data doorzoeken, verbanden leggen, een aanbeveling produceren. Op voorwaarde dat ze toegang heeft.",{"lang":788,"date":1337,"categories":1338,"blogtitlepic":1339},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1317,131],{"id":1344,"title":1345,"author":1346,"cta":494,"description":1347,"hideInRecent":484,"layout":786,"meta":1348,"moment":1349,"path":1353,"stem":1354,"tags":1355,"webcast":484},"content_nl/posts/2026-07-01-onboarding-process.md","Contract ondertekend: zo verloopt jouw onboarding bij ons",[1161],"Hoe verloopt jullie onboarding eigenlijk? Een vraag die we in gesprekken met sollicitanten steeds opnieuw tegenkomen, want velen hebben al eens meegemaakt dat een onboarding hobbelig verloopt. Des te belangrijker is het voor ons om je vanaf het begin een goed gevoel te geven.",{"lang":788,"date":1349,"categories":1350,"blogtitlepic":1351,"customExcerpt":1352},"2026-07-01",[1284],"Onboarding_Blogheader","Het contract is ondertekend, de eerste grote stap is gezet. Maar hoe gaat het nu verder? We nemen je mee achter de schermen van onze onboarding, van het PreBoarding tot de eerste week in het team.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1356,1357,1358],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1360,"title":1361,"author":1362,"cta":494,"description":1363,"hideInRecent":484,"layout":786,"meta":1364,"moment":1365,"path":1369,"stem":1370,"tags":1371,"webcast":484},"content_nl/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: wij horen erbij",[1070],"In het Microsoft-partnerecosysteem bestaat een hele reeks erkenningen, en toch onderscheidt de Frontier Partner Badge zich in opzet van de andere onderscheidingen. Je kunt hem niet aanvragen, want Microsoft kent hem op eigen initiatief toe aan een exclusieve groep partners die in meerdere disciplines tegelijk moeten overtuigen in plaats van in één enkele te schitteren. Microsoft toetst daarbij aangetoonde competentie in Cloud & AI Platforms, in AI Business Solutions en in Security in gelijke mate en richt zich daarmee op organisaties die AI niet zien als opzetstuk op bestaande IT, maar als resultaat van een doorlopende architectuur die van identiteit via endpoint tot in productieve AI-operations draagt.",{"lang":788,"date":1365,"categories":1366,"blogtitlepic":1367,"customExcerpt":1368},"2026-06-26",[1284],"head-frontier-partner-badge.jpg","Sinds kort bestaat er binnen het Microsoft AI Cloud Partner Program een nieuwe toponderscheiding, de Frontier Partner Badge. Microsoft kent die uitsluitend toe aan een exclusieve groep partners wereldwijd die AI-projecten op de volledige Microsoft-stack draagkrachtig leveren, van de workplace via het cloudplatform en security tot in de AI-toepassing zelf, en die dat in de praktijk hebben aangetoond. In de DACH-regio telt die groep slechts een handvol bedrijven, en wij zijn er een van.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1290,1372,1317],"Microsoft Partner",{"id":1374,"title":1375,"author":1376,"cta":494,"description":1377,"hideInRecent":484,"layout":786,"meta":1378,"moment":1379,"path":1383,"stem":1384,"tags":1385,"webcast":484},"content_nl/posts/2026-06-09-vair-run.md","160 kilometer voor het goede doel",[1168],"Zondagochtend, 8:30 uur, Holbeinsteg aan de Main. Elf collega's in dezelfde NinjaCat-shirts, klaar voor de Frankfurter Runden. Regen, bliksem en donder inbegrepen. Voor een goed doel lopen was motivatie genoeg om ondanks het slechte weer de hardloopschoenen aan te trekken.",{"lang":788,"date":1379,"categories":1380,"blogtitlepic":1381,"customExcerpt":1382},"2026-06-08",[1284],"frankfurter-runden.png","Elf collega's, 16 rondes, 160 kilometer, een onweersfront en een podiumplek: glueckkanja deed mee aan de Frankfurter Runden 2026 en doneerde voor elke gelopen ronde aan VAIR e.V., die in Offenbach een inclusief sport- en cultuurpark bouwt.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1386,1356,1387],"Top Arbeitgeber","Soziales Engagement",{"id":1389,"title":1390,"author":1391,"cta":494,"description":1392,"hideInRecent":484,"layout":786,"meta":1393,"moment":1394,"path":1398,"stem":1399,"tags":1400,"webcast":484},"content_nl/posts/2026-04-10-incident-to-intelligence.md","Anatomie van een onbekende AMOS Stealer: van alert naar immuniteit in enkele uren",[1149],"Wanneer in ons SOC een alert afgaat, begint de klok te lopen: niet alleen voor de getroffen klant, maar voor alle organisaties onder onze bescherming. Het gevaarlijkste moment in het huidige dreigingslandschap is de intelligence gap, het tijdvenster tussen de eerste inzet van een nieuwe malwarevariant en de dag waarop de branche daarvan hoort.",{"lang":788,"date":1394,"categories":1395,"blogtitlepic":1396,"customExcerpt":1397},"2026-04-10",[235],"head-amos-stealer.png","Een tot dan toe ongedocumenteerde AMOS-stealervariant compromitteerde een macOS-endpoint. Geen bekende hashes, geen C2-gegevens in openbare databases. Ons SOC haalde zes obfuscatielagen uit elkaar, extraheerde alle indicatoren en verdeelde de bescherming binnen enkele uren over alle SOC-klanten, nog voordat de branche het sample had gezien.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1401,1402,1403,1404,1405],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1407,"title":1408,"author":1409,"cta":494,"description":1410,"hideInRecent":484,"layout":786,"meta":1411,"moment":1412,"path":1415,"stem":1416,"tags":494,"webcast":484},"content_nl/posts/2026-03-21-microsoft-edge-corporate-browser.md","Waarom Edge jullie enige corporate browser zou moeten zijn",[941],"De keuze van de browser is in bedrijfsomgevingen een strategische beslissing: die bepaalt direct hoeveel security en hoeveel beheerlast je werkelijk hebt. Google Chrome was lang de voor de hand liggende optie, maar Microsoft Edge is uitgegroeid tot een browser die direct ingrijpt op de bestaande stack, vooral wanneer Microsoft 365 in gebruik is en het beheer via Intune loopt.",{"lang":788,"date":1412,"blogtitlepic":1413,"customExcerpt":1414},"2026-03-21","head-microsoft-edge-default-browser.jpg","Geen enkele organisatie heeft Chrome echt gekozen; hij was er simpelweg, met eigen sync-logica, eigen accountbeheer en een eigen interface voor policies. Microsoft Edge grijpt daarentegen direct in op de infrastructuur die toch al draait: Entra ID, Intune, Defender. Deze post laat zien hoe de overstap eruitziet, hoe Chrome via een Intune-policy naar een landingpage wordt omgeleid en wat er wegvalt zodra je stopt met het parallel beheren van twee browsers.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":520,"title":521,"author":1418,"cta":494,"description":530,"hideInRecent":484,"layout":786,"meta":1419,"moment":791,"path":871,"stem":873,"tags":1421,"webcast":484},[523],{"lang":788,"date":791,"categories":1420,"blogtitlepic":793,"customExcerpt":795},[235],[71,875,876],{"id":1423,"title":1424,"author":1425,"cta":494,"description":1426,"hideInRecent":484,"layout":786,"meta":1427,"moment":1428,"path":1432,"stem":1433,"tags":1434,"webcast":484},"content_nl/posts/2026-03-16-ai-agent-hackathon.md","Zes agents. Vier weken. Echt in productie.",[1070],"Hoeveel uur per week besteedt jullie IT-afdeling aan taken die een agent in minuten afhandelt?",{"lang":788,"date":1428,"categories":1429,"blogtitlepic":1430,"customExcerpt":1431},"2026-03-16",[1284],"head-ai-agent-hackathon.jpg","Zes bedrijven, vier weken build-fase, zes werkende AI agents: dat was de eerste glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa en lila logistik hebben in Copilot Studio agents gebouwd die vandaag productief lopen. Wat daarbij ontstond en hoe het format werkt.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1317,1435,1436,1437],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1439,"Fritz Zurhorst":1440,"Nadine Klein":1441,"Jan Geisbauer":1442,"Carolin Kanja":1446,"Anna Ulbricht":1447,"Annette Brauns":1448,"Pascal Asch":1449,"Steffen Schwerdtfeger":1450},{"display_name":910,"avatar":911,"permalink":912,"twitter":913,"linkedin":914,"imageOffsetTop":915,"imageOffsetLeft":916},{"display_name":884,"avatar":885,"permalink":886,"linkedin":887,"imageOffsetTop":888},{"display_name":904,"avatar":905,"permalink":906,"twitter":907,"linkedin":908,"imageOffsetTop":888},{"display_name":523,"avatar":1045,"permalink":1046,"twitter":1047,"linkedin":1047,"imageOffsetTop":888,"socials":1443},[1444,1445],{"text":472,"href":1050},{"text":1052,"href":1053},{"display_name":1070,"avatar":1071,"permalink":1072,"twitter":1073,"linkedin":1074},{"display_name":1161,"avatar":1162,"permalink":1163,"linkedin":1164,"imageOffsetTop":1165,"imageOffsetLeft":1166},{"display_name":1168,"avatar":1169,"permalink":1170,"linkedin":1171,"imageOffsetTop":1172,"imageOffsetLeft":915},{"display_name":1149,"avatar":1150,"permalink":1151,"linkedin":1152,"imageOffsetTop":988},{"display_name":941,"avatar":942,"permalink":943,"linkedin":944,"twitter":945,"imageOffsetTop":946,"imageOffsetLeft":947},{"id":879,"extension":880,"meta":1452,"stem":8,"__hash__":1230},{"Jan Geisbauer":1453},{"display_name":523,"avatar":1045,"permalink":1046,"twitter":1047,"linkedin":1047,"imageOffsetTop":888,"socials":1454},[1455,1456],{"text":472,"href":1050},{"text":1052,"href":1053},1791383943333]