Hello and welcome to the Friday, March 24th, 2023 edition of the Sands and its Stormtters Stormcast. My name is Johannes Ulrich and today I'm recording from Augusta, Georgia.

With all the news lately about the snipping and redacting tools that do leave some of the original

information that users attempted to remove life in the image files. I did today publish a quick

diary post about how to safely redact images. Buggy Tools has been a big issue here, so this diary entry is a little bit with that in mind,

with buggy tools that may not necessarily do what you think they're doing,

and what you can do in addition to just using a simple tool to override parts of the image

to make sure that the image that you, for example, post on social media

does not contain any additional content.

A couple quick tricks here is, again, converting images to different image formats or maybe taking

screenshot of images after they have been redacted. Some caveats here where of course you have to be

careful that the rest of your screen when you're taking a screenshot is clean. Also another little

trick here and it's maybe a little bit extreme but probably effective where you're just taking a screenshot is clean. Also another little trick here that's maybe a little bit extreme,

but probably effective, where you're just taking a snapshot with a camera of your screen after you

redacted the image. Some caveats here, of course, is that a camera may add its own metadata

and that you may have to look for things like, for example, screen reflections that may be visible in the camera.

And apparently Microsoft is already working on a fix for the snipping tool in Windows 11.

And Sisa, the cybersecurity infrastructure security agency has released a new tool,

entitled Goose Tool, is what they're calling it,

with a focus on auditing your Microsoft Cloud Logs.

It does work with Microsoft 365, Unified Audit Logs, Azure Activity Logs, Microsoft Defender for IOT alerts, and more.

And basically, what it does is it extracts all of these different logs and then looks for anomalies and alerts you of possible events that you may want to investigate further.

Looks like a pretty interesting tool, in particular with the big focus on things like Azure,

...