Overview
Syllabus
Intro
The Cloud Is Magic!
Internal Network
Anywhere Cloud Access
Cloud Active Directory?
Attackers Love the Cloud
Cloud Attack Timeline
Attacking the Cloud: Password Spraying
Microsoft Cloud Auditing
Enable User & Admin Activity Auditing
Get Mailbox Auditing
Enable Mailbox Auditing
Azure Sentinel (Preview)
Azure Sentinel Detection via GitHub
Azure Sentinel Hunting via GitHub
Azure Sentinel Password Spray Detection
Azure Sentinel Pricing
Cloud Administration Protection
"Break Glass" Cloud Admin Account
Microsoft Cloud Security Controls
Azure Identity Protection
Enable User Risk Remediation Policy
Azure AD Conditional Access
Legacy vs Modern Authentication
Disable Legacy Auth
Disable Service Access
Azure AD Connect Health - ADFS
Password Hash Sync, What & Why?
Azure AD Premium Password Protection
Azure Active Directory Options
Mini Celebration Time!