Cloud-Powered Compromise Blast Analysis: In the Trenches with Microsoft IT


Posted on in Presentations

Microsoft’s Identity Security and Protection team protects millions of authentications, but how do they protect their own walls? Learn how Microsoft Identity product team collaborated with Microsoft IT to discover and implement new blast analysis methods for identity compromise, using the power of cloud logs, SIEMs, and advanced telemetry to discover and remediate compromise.

Pre-Requisites: Basic understanidng of identity and security. Knowledge of KQL is helpful but not necessary.

Participants
Sarah Handler

Participant

Program Manager II, Microsoft

Kristina Laidler

Participant

Senior Director, SOC and Incident Response, Digital Security and Risk Engineering, Microsoft


Share With Your Community