Incident Response

H10 Keep the Front Door Shut - How Cybercriminals are Abusing Entra ID to Gain a Foothold

05/15/2025

3:30pm - 4:30pm

Level: Intermediate to Advanced

Viktor Hedberg

Senior Technical Architect

Truesec

Entra ID has become a main point of entry in a lot of incidents around the world.

This session will cover common tactics used by threat actors and how you can start building your Entra ID as safe as possible.

You will learn:

  • How default settings are allowing threat actors to enumerate large parts of your Entra ID tenant
  • What to do, if anything to stop it.
  • Cool demos, and how you can try it out yourself