Techieism Project Spotlight
π Our WorkOne Compromised M365 Account β Investigated and Remediated With a Custom-Built PowerShell Tool.
A client's Microsoft 365 environment flagged a suspicious sign-in on one user's account β a classic early warning sign of account takeover. Rather than working through the incident by hand in the admin portal under time pressure, Techieism used a custom-built PowerShell investigation and remediation script purpose-built for exactly this scenario.
The script pulled the affected user's sign-in logs to check for anomalous locations and impossible travel, scanned mailbox rules and forwarding for attacker-planted rules, audited delegate permissions for unauthorised access, and reviewed OAuth app consents for rogue third-party authorisations. Once compromise was confirmed, the same toolkit executed remediation in the same run: revoked active sessions, force-reset credentials, stripped the malicious rules, and re-enforced MFA and Conditional Access. The client's account was fully secured β and Techieism now has a reusable, repeatable tool ready for the next incident, for this client or any other.
Past Projects
📚 PortfolioSAP on a 20-Year-Old Server That Can't Be Upgraded β Moved to a Fully Backed-Up VM. βΉ0 Downtime Risk.
A client's mission-critical SAP installation ran on a physical Windows Server 2003 machine with no upgrade path for either the OS or the SAP version. Techieism migrated the entire physical server into a VM β same OS, same licence, same install β now running with automated daily backups, eliminating the hardware failure risk while the client's new ERP rollout proceeds on schedule.
Enquire About This Solution →OEM Firewall Licence Limitations β Replaced with OPNsense, Samba AD, RADIUS & OpenVPN. βΉ0 per Year.
The client's OEM commercial firewall had reached its licence limits, restricting users, connections, and features. Techieism replaced it with OPNsense open-source firewall, and layered on Samba Active Directory, RADIUS network authentication, and OpenVPN remote access β a fully integrated stack with zero annual licence cost and more capability than the commercial product it replaced.
Enquire About This Solution →Business Email Compromise, Contained. Attacker Evicted from M365 β Full Forensics.
A client received email from a known contact whose M365 account was compromised via AiTM phishing. Techieism traced the attack through the Unified Audit Log, revoked sessions, removed inbox rules, reset credentials with MFA, and hardened the tenant with Conditional Access policies. Attacker fully evicted, zero data loss.
Enquire About This Solution →~2TB of SharePoint Data. Two Companies. Zero Data Loss. Zero Paid Migration Tools.
A corporate restructuring required migrating nearly 2TB of SharePoint data across Microsoft 365 tenants. Techieism engineered the entire migration using PowerShell scripting alone β no third-party tool licences, no data loss, full permission mapping, and incremental sync. Every document arrived intact.
Enquire About This Solution →One Server. Four VMs. One Windows Licence Instead of Four. No RAID Controller.
A CA firm needed file server, Active Directory, Tally ERP, and Winman β the conventional approach meant four Windows Server licences, CAL costs, and a hardware RAID controller. Techieism built the entire setup on one machine using Proxmox VE, with Linux VMs for AD and file server (free) and one Windows Server VM for both Tally and Winman. ZFS RAID replaced the hardware controller entirely.
Enquire About This Solution →Four Offices. One Domain. Zero Extra Windows Server Licences.
A multi-office company needed centralised user authentication across all locations. We deployed 4 Samba Active Directory Domain Controllers β one per office β with automatic cross-site replication, single sign-on for all staff, and Group Policy enforcement. Any employee logs in with one account at any office. Built entirely on Linux: no Windows Server licence cost.
Enquire About This Solution →All Offices Connected β No MPLS. No VPN Servers. No Costly Routers.
A multi-office organisation was spending heavily on MPLS leased lines and VPN hardware. We replaced the entire setup with OPNsense open-source firewalls at each site, a self-hosted Headscale mesh coordination server, and WireGuard encrypted tunnels between all locations. Every office connects securely to every other β servers, printers, internal apps β as if on one LAN. Remote staff connect to the same mesh. New offices added in minutes.
Enquire About This Solution →