Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms

Black Hat via YouTube

Overview

Dive deep into the internal workings of device authentication in Entra ID Conditional Access through this conference talk. Explore how attackers can potentially bypass device authentication without administrator privileges by interacting with device certificates and session keys protected by TPM. Learn about the discovered attack implemented through reverse-engineering Microsoft authentication library, which currently has no fix. Walk through the details of the device authentication flow, attack mechanisms for bypassing Conditional Access, and gain insights into defending against and detecting such attacks. Understand the implications for securing Microsoft cloud infrastructure and the challenges in applying appropriate access controls.

Syllabus

Bypassing Entra ID Conditional Access Like APT: A Deep Dive Into Device Authentication Mechanisms

Taught by

Black Hat

Reviews

Start your review of Bypassing Entra ID Conditional Access - A Deep Dive Into Device Authentication Mechanisms

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.