I'm in Your Cloud, Reading Everyone's Emails - Hacking Azure AD via Active Directory

Dive into the world of Azure Active Directory security in this 48-minute conference talk. Explore the intricacies of AD Connect installation, cryptographic techniques, and the DP API. Learn about Azure AD Power Modules, application privileges, and service principles, including associated risks. Discover the concept of Seamless SSO and Kerberos delegation. Gain insights into potential vulnerabilities and security considerations when integrating on-premises Active Directory with Azure AD. Walk away with a deeper understanding of cloud security challenges and practical knowledge to enhance your organization's Azure AD protection.

Who am I
Where is AD Connect installed
The crypto magic
DP API
Summary
Python tool
Azure AD
Power Modules
Privileges
What is an application
Service principles
Service principles risks
Seamless SSO
Kerberos delegation
Conclusion