The Conditional Access Policy (CAP) in Microsoft Entra ID is one of the most powerful enforcement layers in the identity protection stack.
It’s powerful, but imperfect—creating a playground for red teams.

This meetup will **bridge the attacker mindset and defender best practices** in a practical, real-world format. From offensive simulations to defensive hardening, we’ll uncover what’s happening behind the policies.

In a nutshell - Attacking & Defending Entra ID Conditional Access.

**Why Attend?**

This isn’t a typical 101 meetup. It’s a live and technical demo focused on **how attackers think and how defenders can evolve.** Whether you build or break policies, you’ll leave with new insights and practical takeaways.

The meetup will be part of the new cooperation with **[Workplace Ninja](https://www.wpninjas.ch)**.

**AGENDA**

17:15 > Pizzas and Beers - Break the ice
18:00 > Entra ID CAP - Defender Mode by Ofir Gavish
18:45 > Entra ID CAP - Attacker Mode by Elli Shlomo
19:30 > Detection and Hunting with Kusto by Ofir and Elli
20:00 > Closing

**What You’ll Learn**

* How attackers bypass Conditional Access using real-world techniques like Device Code Flow and Access token.
* How to detect and respond to suspicious sign-ins and CA policy gaps.
* Best practices for designing resilient and adaptive Conditional Access policies.
* Red team demos + blue team playbooks = full-spectrum identity defense.

**Audience:** Red Teamers, Blue Teamers, SOC Analysts, Cloud Security Engineers, Identity Architects, and everyone who wants to improve IAM security - **especially in Entra ID CAP**.

**Speakers**

* **Elli Shlomo** – Microsoft Security MVP\, Head of Security Research \| Guardz
* **Ofir Gavish** \- Microsoft Intune MVP \| Cloud Infrastructure Team Lead \| Essence Group

**NOTES**

* Content Level - 300-400
* ​The event is physical at the Microsoft Reactor TLV
* ​​The event will not be streamed or recorded

​**COMMUNITY CHANNELS**

[MSFT.SEC.ADVOCATE on WhatsApp](https://chat.whatsapp.com/Ic76d4nANyf0I2vVyLOzb5)
[WorkplaceNinja.IL on WhatsApp](https://chat.whatsapp.com/GcVodEdV3Kp1OXgSYUcJGi)
[Community Notifications on WhatsApp](https://chat.whatsapp.com/EFyFFU5zvgiH93XqPH8Q8E)
[A landing page for all Community Groups](https://eshlomo.blog/community/)
[The User Groups IL on LinkedIn](https://www.linkedin.com/groups/12085030/)

User Groups IL

Elli Shlomo (IR)

Edward Keselman

Gil Zilbershtein

Yedidya Bar

Trivikram M

Andrew McCallum

Topaz Hurvitz

Ami Braun

גיל גלפרוביץ

Ravid Brown

אלרן רחמני

David Habusha

Ofek Ben Eliezer

Eliya Lahav

יהונתן פלדות

orly

Alon Dror

Ofir Gavish

tal shachor

Haim Behar

Entra ID: The Conditional Access Battlefield

Microsoft Reactor Tel Aviv

Join us for a focused, practical session where we’ll showcase how Microsoft’s **Azure AI Services** can be seamlessly integrated into existing infrastructure and operational environments.

We’ll walk through the core AI capabilities available in Azure, demonstrate how to launch projects using **Azure AI Foundry**, and explore what it means to use AI *responsibly and intelligently* in real-world production environments.

This session is designed for infra professionals, cloud architects, DevOps engineers, and technical teams looking to bring modern AI tools into their day-to-day cloud operations — without reinventing the wheel.

## **Why Attend?**

* Understand how AI can add value to your current infra stack
* Learn how to start fast with Azure-native tools
* Get practical insights into responsible AI use in enterprise environments
* Ask questions, share challenges, and connect with others in the field

## **Agenda**

**20:00** \- Break the ice
**20:05** - *Overview: Azure AI Services – What’s Available and Why It Matters*
**20:30** - *Azure AI Foundry: Building Your First AI-Enabled Project*
**20:45** \- Open Q&A

## **What You’ll Learn**

* The core services available under Azure AI
* How to kick off AI projects using Azure AI Foundry
* How to align AI with your team’s goals and governance needs

## **Who Should Attend?**

* Cloud Infrastructure Engineers
* DevOps & CloudOps Professionals
* Site Reliability Engineers (SREs)
* Cloud Solution Architects
* Tech leads and IT decision-makers exploring AI adoption

**\#\# Notes**

* Content Level - 200
* ​​The event will be streamed or recorded
* The event will be delivered in Hebrew

**\#\# Community Channels**

[AZ.FANS Group on WhatsApp](https://chat.whatsapp.com/KpwgD75YbutL2IaLbEJvRh)
[MICROSOFT.AI Group on WhatsApp](https://chat.whatsapp.com/JSJKFuHGNH5CPVoR0Qtulz)
[A landing page for all Community Groups](https://eshlomo.blog/community/)

Victor Shneer

Binyamin

Roee Golan

pavel kutuzov

Nir Berger

Rivka

dror roth

Shiran Halliva

Amir Marcus

Michal Goldstein

Ronen Grossman

boriswinebrand

רותם לוי

galshalom5

Tuvya Kfir

Elad Sheffer

Peter Oboukhovski

asif shapira

Embedding AI into Your Azure Stack

Online event

The Circle

{networkName}を検索する

グループ

{PRO_NETWORK_NAME}はMeetup Proに登録しており、世界中の{PRO_GROUP_COUNT}のMeetupで{PRO_MEMBER_COUNT}人以上のメンバーが参加しています。Meetup Proは、ユーザー、パートナー、コントリビューター、メンバーのネットワークを管理できるプロフェッショナルなコミュニケーションツールです。

The Circle

The Circle

私たちについて

The Circleを検索する

今後のイベント

グループ