Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring Microsoft Entra ID
103
talks mention this tool across
53
BSides chapters.
Talks featuring Microsoft Entra ID
42:05
Turning The Tables: Using Cyber Deception To Hunt Phishers At Scale - Ross Bevington
Ross Bevington
BSides Exeter
Technical
Talk
Open →
2024-10
23:15
APT Attack Techniques in Azure Cloud
Lina Lau
BSides Canberra
· 2023
Technical
Cloud IAM
Talk
Open →
2024-01
41:58
Introducing Office 365 Attack Toolkit
Rio Sherri
BSides Leeds
· 2020
Technical
Open →
2020-07
28:23
AWS vs Azure Security
Paul Schwarzenberger
BSides London
· 2019
Technical
Cloud IAM
Talk
Open →
2019-06
52:59
Hiding in the clouds: How attackers can use applications for sustained persistence and how to find it
Mark Morowczynski
Michael Epping
Bsides CT
· 2020
Technical
Cloud IAM
Blue
Talk
Open →
2020-11
47:40
Uncovering Azure's Silent Threats: A Journey into Cloud Vulnerabilities
Nitesh Surana
BSides Ahmedabad
Technical
Talk
Open →
2024-05
51:17
BSidesSF 2023 - Advanced Attack Vectors in Azure Environments (Zur Ulianitzky, Bill Ben Haim)
Zur Ulianitzky
Bill Ben Haim
BSidesSF
· 2023
Technical
Active Directory
Cloud IAM
Advanced
Red
Technical Deep-dives
Talk
Open →
2023-05
52:17
The Current State of Microsoft Identity Security: Common Security Issues
Sean Metcalf
BSides Charm
· 2024
Technical
Active Directory
Cloud IAM
Threat Intel
Blue
Case Studies and Incidents Analysis
Talk
Open →
2024-06
25:15
Inside Cloud Attack Paths: End-to-End Adversary Simulation
Mauricio Velazco
BSides NYC
· 2025
Technical
Cloud IAM
Threat Modeling
Blue
Red
Talk
Open →
2025-11
24:50
Layers of Cloud: Azure and the Mishandling of Secrets
Katie Knowles
BSides Toronto
· 2022
Technical
Cloud IAM
Web AppSec
Case Studies and Incidents Analysis
Talk
Open →
2022-10
53:45
Signing your code the easy way
Oren Novotny
BSides DC
· 2019
Technical
DevSecOps
Supply Chain Security
Talk
Open →
2019-11
44:48
Offensive Azure Security by Sergey Chubarov
Sergey Chubarov
BSides Dublin
· 2021
Technical
Talk
Open →
2021-05
3:33:32
BSides 2019 Day 1 Track 2
BSides Vancouver
Open →
2019-03
37:28
An Overview in Cloud Penetration Testing
Bleon Proko
BSides Prishtina
· 2022
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2022-05
43:21
The Problem With Identity Security & How To Fix It
Sean Metcalf
BSides Dublin
Technical
Talk
Open →
2024-06
41:20
Ohhhh365 - How To (Quite) Reliably Hack Into Microsoft 365, And What To Do Afterwards
Sunny Chau
BSides Cheltenham
· 2024
Technical
Cloud IAM
Web AppSec
Red
Talk
Open →
2024-07
32:16
Breaking Entra: Real-World Cloud Identity Attacks You Can Recreate
Tomer Nahum
Jonathan Elkabas
BSides Frankfurt
· 2025
Technical
Active Directory
Cloud IAM
Intermediary
Blue
Red
Technical Deep-dives
Demo
+1
Open →
2025-12
27:15
Abusing Azure Arc: From Service Principal Exposed To Reverse Shell
Christian Bortone
BSides Leeds
· 2024
Technical
Active Directory
Cloud IAM
Advanced
Red
Technical Deep-dives
Talk
Open →
2024-07
45:57
Identity Security Pitfalls: Common Issues and Misconfigurations in Entra ID
Alistair Pugin
BSides Joburg
· 2025
Technical
Active Directory
Cloud IAM
Talk
Open →
2025-08
33:39
BSidesCharm 2025 - What’s in the Cloud? - Kai Iyer
BSides Charm
Open →
2025-05
49:49
Closing the Visibility Gap: Threat Hunting with Hawk in the Microsoft Cloud
Jonathan Butler
Lorenzo
Paul Navarro
BSides Charm
· 2025
Technical
Tooling
Cloud IAM
DFIR
Detection Engineering
Threat Hunting
Intermediary
Blue
+2
Open →
2025-05
26:03
Pwning Zee Cloud: Microsoft Edition
Alberto Rodriguez
BSides Augusta
· 2021
Technical
Active Directory
Cloud IAM
Blue
Red
Talk
Open →
2021-10
25:43
How Attackers (or Red Teamers) Navigate Azure Using Key Vault Lateral Movement
Christiano Bianchet
BSides Seattle
Technical
Cloud IAM
Red
Talk
Open →
2025-08
45:34
Purple Teaming Cloud Identity Simulation Labs for Red and Blue teams
Jason Ostrom
BSides Dallas/Fort Worth
· 2022
Technical
Cloud IAM
Detection Engineering
Threat Modeling
Purple
Technical Deep-dives
Demo
Talk
Open →
2022-11
40:07
Active Directory ain't going anywhere, so we might as well secure it
Eric Woodruff
BSides KC
Technical
Active Directory
Blue
Talk
Open →
2024-05
54:45
GT - Reduce, Reuse and Recycle ML Solutions for Security - Ram Shankar Siva Kumar
BSides Las Vegas
Open →
2019-10
55:57
Y'all Tryna enumerate Azure AD and RBAC or Nah?
Leron Gray
BSides Seattle
· 2020
Technical
Cloud IAM
Red
Demo
Talk
Open →
2020-11
35:42
The Wide World of Consent
Jonathan Everatt
BSides Cape Town
· 2023
Technical
Cloud IAM
Social Engineering
Web AppSec
Intermediary
Blue
Red
Talk
Open →
2023-12
31:15
Unconditionally Conditional – Strong Authentication in Microsoft Entra ID
Don Mallory
BSides Toronto
· 2023
Technical
Active Directory
Cloud IAM
Blue
Talk
Open →
2023-11
39:13
Hiding In The Clouds
Mark Morowczynski
Corissa Koopmans
BSides Charlotte
· 2020
Technical
Cloud IAM
Talk
Open →
2020-10
49:35
BSidesROC 2025 - Investigating a Malicious Script in Microsoft Intune - Dennis Labossiere
BSidesROC
Open →
2025-03
23:49
Deep Dive to Entra ID Token Theft Protection
Dr. Nestori Syynimaa
BSides Toronto
· 2025
Technical
Cloud IAM
Technical Deep-dives
Demo
Open →
2025-10
45:35
A Developer's Guide for Building Zero Trust Ready Apps
Kaylan Krishna
BSides Peru
· 2022
Technical
Cloud IAM
DevSecOps
Talk
Open →
2022-09
33:12
A Journey To Zero Trust
Joshua Danielson
Brittany Little
Dileep Gurazada
BSides Las Vegas
· 2021
Technical
Cloud IAM
Threat Modeling
Blue
Talk
Open →
2021-08
30:30
Attacking Zero Trust Designs in 2021
Michael Cavallin
BSides Vancouver
· 2021
Technical
Technical Deep-dives
Talk
Open →
2021-06
45:47
Bye Bye NTLM
Evgenij Smirnov
BSides Berlin
· 2023
Technical
Active Directory
Kerberos
Blue
Talk
Open →
2024-01
51:12
Cloud IAM Strategy for Multicloud and Hybrid Environments: Risks and Gaps
Cassandra Young
Christian Nicholson
BSides Charm
· 2024
Technical
Cloud IAM
Intermediary
Talk
Open →
2024-06
42:35
BSidesSLC 2025 -- Restless Guests – Azure Exploit Exposed by Simon Maxwell-Stewart
BSides SLC
Open →
2025-06
49:49
Cloud Breach Incident Response & Forensics
Michael T. Raggo
Bsides CT
· 2020
Technical
Cloud IAM
Case Studies and Incidents Analysis
Talk
Open →
2020-11
1:00:02
Calling from Inside the House: How Nation States Use Your Domain to Compromise Your Cloud Infrastructure
Alex Parsons
BSides Vancouver
· 2021
Technical
Cloud IAM
DFIR
Threat Intel
Blue
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2021-06
17:01
Bootstrapping Security in the Wild: A Ground Up Guide for Remote-First Teams
Aditya Dev
BSides Toronto
· 2025
Technical
Cloud IAM
DevSecOps
GRC
Intro
Talk
Open →
2025-10
46:46
What the Function: A Deep Dive into Azure Function App Security
Karl Fosaaen
BSides PDX
· 2024
Technical
Cloud IAM
Talk
Open →
2024-11
33:48
Demystifying Cloud Infrastructure Attacks
BSides Munich
Technical
Cloud IAM
Red
Talk
Open →
2024-11
38:39
Microsoft Security Co-Pilot: Do you really need AI in your SOC?
Thomas Dang
BSides Edmonton
· 2024
Technical
Talk
Open →
2024-12
26:31
Alex Walston - Threat Hunting in Your Identity Stack
Alex Walston
BSides Augusta
· 2025
Technical
Cloud IAM
Blue
Talk
Open →
2025-10
27:40
All You Need is Guest
Avishai Efrat
BSides TLV
· 2024
Technical
Cloud IAM
Red
Demo
Talk
Open →
2024-08
55:56
KQL and Azure AD Workbooks
Corissa Koopmans
Tosin Lufadeju
BSides Charm
· 2022
Technical
Cloud IAM
Detection Engineering
Threat Intel
Intro
Blue
Talk
Open →
2022-07
43:38
Passwords: Policies, Securing, Cracking, and More
Derek Melber
BSides Las Vegas
· 2023
Technical
Active Directory
Kerberos
Talk
Open →
2023-10
27:48
Application Consent - Persistent Access for the Good and Bad
George Coldham
BSides Perth
· 2021
Technical
Talk
Open →
2021-09
43:44
Bridging Clouds and Domains, Expanding Risks
Guillaume Bossiroy
BSides Limburg
· 2026
Technical
Active Directory
Cloud IAM
Blue
Red
Demo
Talk
Open →
2026-04
42:20
The Million Dollar CEO Fraud: Anatomy of a Business Email Compromise: Damien Miller-McAndrews
Damien Miller-McAndrews
BSides Edmonton
· 2023
Technical
Blue
Case Studies and Incidents Analysis
Talk
Open →
2023-10
48:17
Did You Say Millions Of Sessions? How Cheap Kits Fuel AiTM Attacks On Microsoft 365
Joshua Rawles
BSides London
· 2025
Research
Technical
Detection Engineering
Threat Intel
Web AppSec
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2026-03
51:28
Measures for Securing Privileged Users in M365&Azure Every Organization Should Take by Eric Woodruff
Eric Woodruff
BSides Tampa
Technical
Active Directory
Cloud IAM
Blue
Talk
Open →
2024-05
59:18
BSidesAugusta 2018 - Martin Holste - An Anatomy Of A Cloud Hack
BSides Augusta
Open →
2018-11
23:21
Skills to Build for Your Cloud Security Career
Cassandra Young
BSides Philly
· 2023
Career
Career & Soft Skills
Cloud IAM
Intro
Talk
Open →
2024-01
39:40
Offensive Azure Security
Sergey Chubarov
BSides Budabest
· 2021
Technical
Cloud IAM
Red
Demo
Open →
2022-03
42:37
Modern Identity Providers Under Attack: Tactics, Techniques, Detections and Mitigations
Anurag Khanna
BSides Canberra
· 2025
Technical
Authentication & Authorization
Cloud IAM
Threat Intel
Intermediary
Blue
Red
Case Studies and Incidents Analysis
+2
Open →
2025-12
46:44
BG - All You Need is Guest: Beyond Enumeration
BSides Las Vegas
Open →
2023-10
42:27
Restless Guests: From Subscription to Backdoor Intruder
Simon Maxwell-Stewart
BSides Seattle
Talk
Open →
2025-06
34:09
Exfiltrating your M365 Data with OAuth Apps
Federico Cedolini
BSides Peru
· 2024
Technical
Cloud IAM
DFIR
Threat Intel
Talk
Open →
2024-08
36:00
Oh! 365 - Avoid an "Oh ****" moment in Office 365
Dan Whalen
BSides PDX
· 2018
Technical
Blue
Talk
Open →
2019-02
32:51
I Hope This Email Finds You Well: AI Phishing, MFA Theft, Consent Grant Abuse, and Remediation in O365 & Entra ID
Mack Taff
BSides Dallas/Fort Worth
· 2024
Technical
AI Security
Cloud IAM
Social Engineering
Talk
Open →
2025-01
37:35
When Cloud Infrastructure Provisioned With Someone in Marketing's Credit Card Is Compromised
Aaron Shelmire
BSides Peru
· 2023
Technical
Cloud IAM
DFIR
Blue
Talk
Open →
2023-08
34:19
Breaching a Bank: Mission Impossible Style
Ridhwan Roshan
BSides Dublin
Technical
Talk
Open →
2025-10
44:35
Restless Guests: From Subscription to Backdoor Intruder by Simon Maxwell-Stewart
Simon Maxwell-Stewart
BSides Edmonton
· 2025
Technical
Cloud IAM
Red
Technical Deep-dives
Talk
Open →
2025-10
30:01
Use Case Design for Dummies: How to Construct Mouse Traps
Petar Dangov
BSides Sofia
· 2025
Technical
Talk
Open →
2025-04
20:28
I'm not actually an SCCM admin... I just implied it
Garrett Foster
BSides PDX 2025
Technical
Active Directory
Cloud IAM
Red
Technical Deep-dives
Talk
Open →
2025-12
20:20
What We've Learned From Exposing Atlassian On The Internet
Oleksandr Kazymyrov
BSides Munich
· 2023
Talk
Open →
2023-10
19:36
Offensive Azure Security
Sergey Chubarov
BSides Athens
· 2021
Technical
Active Directory
Cloud IAM
Red
Demo
Open →
2021-07
51:11
trustno1: Protecting your Data in a Zero Trust World
David Branscome
BSides Charleston
· 2019
Technical
Active Directory
Cloud IAM
Talk
Open →
2019-11
39:59
Everything I Know About Asset Inventory, I Learned From Taylor Swift... - Justin Scarpaci
BSides Peru
Open →
2023-08
48:28
Mitigating (Radio)Active Directory
Jeff Hoge
BSides Buffalo
· 2023
Technical
Active Directory
Kerberos
Blue
Talk
Open →
2023-06
42:07
SSH Authentication Using User and Machine Identities
Morten Linderud
BSides Oslo
· 2025
Technical
Talk
Open →
2026-03
59:08
Alexander Andersson - Demystifying Cloud Infrastructure Attacks (BSidesFrankfurt 2024)
BSides Frankfurt
Open →
2025-04
45:37
Mature IAM in the Era of Work from Home
Bhuvaneshwari Natarajan
BSides Edmonton
· 2020
Technical
Talk
Open →
2020-09
27:02
The Silent Data Breach: Unintended Exposure of Sensitive Information in Microsoft Enterprise Enrollment, Entra, and Intune
Jeffrey Gaor
Parameswaran Ganesan
BSides Sydney 2025
Technical
Authentication & Authorization
Cloud IAM
Talk
Open →
2026-05
44:52
Credential Compromise: Well, What Now?
Nate Kirk
BSides Dallas/Fort Worth
· 2021
Technical
Active Directory
Cloud IAM
Network Security
Purple
Talk
Open →
2021-11
27:09
From Red to Blue: Security Strategies in Azure
Anthony Hendricks
BSides SLC
· 2023
Technical
Active Directory
Cloud IAM
Talk
Open →
2023-12
24:50
PG - Enemy at the Gate, and Beyond: Detecting and Stopping Account Takeover
Yuval Zacharia
BSides Las Vegas
· 2023
Technical
Cloud IAM
Detection Engineering
Threat Intel
Blue
Talk
Open →
2023-10
29:54
Déjà Vu With Scattered Spider: Are Your SaaS Doors Still Unlocked?
Andi Ahmeti
Abian Morina
BSides Munich
· 2025
Technical
War Stories
Cloud IAM
Detection Engineering
Threat Intel
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2026-02
36:13
Top 10 Mistakes Made In Active Directory That Can Lead To Being Compromised
Adam Steed
BSides Philly
· 2017
Technical
Active Directory
Talk
Open →
2017-08
22:50
IAM Very Confused: A Friendly Guide To Cloud And Modern AuthZ - Tom Cope
Tom Cope
BSides Basingstoke
· 2025
Technical
Cloud IAM
Talk
Open →
2025-09
28:52
The World Of Cyber Security, According To Microsoft
Nick Lines
BSides Leeds
Intro
Talk
Open →
2025-08
49:47
Offensive Azure Security
Sergey Chubarov
BSides Cyprus
· 2021
Technical
Cloud IAM
Red
Demo
Open →
2022-06
45:40
Offensive Azure Security
Sergey Chubarov
BSides Barcelona
· 2021
Technical
Active Directory
Cloud IAM
Red
Demo
Open →
2022-01
57:09
Signing your code the easy way
Oren Novotny
BSides DC
· 2019
Technical
DevSecOps
Talk
Open →
2019-10
18:26
Threats Against Cloud Application Identities And What You Should Do About Them
Yochana Henderson
BSides Cheltenham
· 2022
Technical
Cloud IAM
Talk
Open →
2022-07
29:47
Story behind weaponizing the Intune Conditional Access bypass & Making Friends over Christmas
BSides Hong Kong
Open →
2025-06
30:49
IAM and why it is important in Cloud environments
Dan Thormodsgaard
BSides Tampa
· 2021
Technical
Cloud IAM
Talk
Open →
2021-04
49:32
The Million Dollar CEO Fraud: Anatomy of a Business Email Compromise
Damien McAndrews
BSides Calgary
Technical
Cloud IAM
DFIR
Threat Intel
Case Studies and Incidents Analysis
Talk
Open →
2024-03
45:35
2024 Security BSides // Doug Hislop
Doug Hislop
BSides Cayman Islands
· 2024
Open →
2025-01
40:40
Forcepoint
BSides Calgary
· 2022
Technical
Cloud IAM
Network Security
Privacy
Intermediary
Demo
Open →
2022-12
25:21
Mind Management
Eric Woodruff
BSidesROC
· 2023
Technical
Talk
Open →
2024-09
36:31
Zero Trust
Dan Megalo
BSidesROC
· 2024
Technical
Talk
Open →
2025-03
51:25
Cloud Environments — Red Team Perspectives
Pierre Nicolas Allard Coutu
BSides St. John's
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2025-05
52:58
You Moved to Office 365, Now What?
Sean Metcalf
BSides Charm
· 2019
Technical
Active Directory
Cloud IAM
Blue
Talk
Open →
2021-05
47:47
Trust Boundary Theater: Lateral Movement in the Age of Hybrid Cloud
Ian Lin
Chance Pearson
BSides Edmonton
· 2025
Technical
Active Directory
Cloud IAM
Red
Talk
Open →
2025-10
34:38
Trustno1: Protecting Your Data in a Zero Trust World
David Branscome
BSides Greenville
· 2020
Technical
Active Directory
Cloud IAM
Detection Engineering
Blue
Demo
Talk
Open →
2020-06
47:46
Get your head in the clouds by Sean Verity
Sean Verity
BSides Austin
Talk
Open →
2024-02
28:37
Cloud Security anno 2025: Start Secure, Stay Secure
Rhesa Baar
BSides Amsterdam
· 2025
Technical
Cloud IAM
Talk
Open →
2026-01
38:28
Identity and Security: Why Identity Belongs in Security
Eric Woodruff
BSides Calgary
Technical
Active Directory
Cloud IAM
Blue
Talk
Open →
2024-03
24:28
When Programs Go Rogue: Identity Sprawl in the Grid
Nick Newell
BSides Charlotte
· 2026
Technical
Active Directory
Cloud IAM
Intermediary
Blue
Talk
Open →
2026-04
40:40
Data Lake Security in the Public Cloud
Shamir Charania
BSides Calgary
Technical
Cloud IAM
Network Security
Talk
Open →
2022-12
[ feedback ]
Spotted a wrong year, missing speaker, broken link, or anything off? Send a quick note.
From:
Subject:
Message:
Send →
