Securing Entra ID to Avoid Privilege Escalation

Successful cyberattacks generally involve the adversary gaining control of the identity provider, such as Entra ID. Defending Entra ID requires an understanding of where true privilege lies. In this talk, Andrew will discuss Global Admin equivalence and how easy it is to overlook Entra roles that can be misused to gain control of Entra ID. He'll also discuss some of the dangers that Entra ID and on-premises Active Directory present to each other and how to avoid a compromise of one leading to a compromise of the other.

Will be held at the A23 office (Lv 7, 5 Constitution Ave Canberra)
Presentation by Andrew Lynes

5:30pm - Mingling
6:00pm - Andrew will speak
7:00pm onwards - Pizza / networking