Your Conditional Access Device Filters Are a Paper Wall
We keep bypassing Conditional Access device filters on engagements using browser DevTools and a VM. This post covers the three bypass patterns we see most often — User Agent spoofing, the null property problem, and the bait-and-switch — plus how to build policies that actually hold up.