Hack12: Attacks Against Entra ID and Azure Environments

Hardly any company can do without cloud infrastructure these days. Its use can be limited to individual services, set up as a hybrid environment, or designed as a cloud-only infrastructure.

While cloud environments often support modern security architecture, misconfigurations and negligence can also enable attacks here. Accordingly, the training course covers various security fundamentals and attacks against Entra ID and Azure environments.

Topics

Entra ID (formerly Azure AD)

Basic structure and functions
Permissions and roles
Privilege escalation
Conditional access / access controls

Azure infrastructure

Functionality
Technical accounts
Privilege escalation

Microsoft 365

Exchange Online
SharePoint
Teams

Reconnaissance of cloud environments

Technical requirements

Basic knowledge of Windows and Linux systems, competent handling of command line; basic knowledge of cloud infrastructured are helpful but not necessary