You Moved to Office 365 - Now What

Explore the critical aspects of transitioning to Office 365 in this informative conference talk from BSides Charm 2019. Delve into the complexities of cloud migration, covering topics such as internal network security, cloud access management, and potential vulnerabilities in cloud-based Active Directory. Learn about common attack vectors, including password spraying, and discover essential Microsoft cloud auditing techniques. Gain insights into Azure Sentinel for threat detection and hunting, and understand the importance of cloud administration protection. Examine crucial Microsoft cloud security controls, including Azure Identity Protection, Conditional Access, and modern authentication methods. Investigate Azure AD Connect Health, Password Hash Sync, and Azure Active Directory options to enhance your organization's cloud security posture.

Intro
The Cloud Is Magic!
Internal Network
Anywhere Cloud Access
Cloud Active Directory?
Attackers Love the Cloud
Cloud Attack Timeline
Attacking the Cloud: Password Spraying
Microsoft Cloud Auditing
Enable User & Admin Activity Auditing
Get Mailbox Auditing
Enable Mailbox Auditing
Azure Sentinel (Preview)
Azure Sentinel Detection via GitHub
Azure Sentinel Hunting via GitHub
Azure Sentinel Password Spray Detection
Azure Sentinel Pricing
Cloud Administration Protection
"Break Glass" Cloud Admin Account
Microsoft Cloud Security Controls
Azure Identity Protection
Enable User Risk Remediation Policy
Azure AD Conditional Access
Legacy vs Modern Authentication
Disable Legacy Auth
Disable Service Access
Azure AD Connect Health - ADFS
Password Hash Sync, What & Why?
Azure AD Premium Password Protection
Azure Active Directory Options
Mini Celebration Time!