Training summary

In the past few years more and more companies adopted Azure AD as an identity platform for their cloud services, often using their existing on-prem AD as a source for a hybrid setup. As a red teamer, pentester, or security architect, you are probably familiar with Active Directory security concepts. Azure AD is vastly different and is built around different concepts and protocols.

This training explains how organizations use Azure AD to manage modern cloud-based or hybrid environments and what security challenges this brings. It is the result of many years of research into the protocols and internals of Azure AD. It will give you the knowledge to analyze, attack, and secure Azure AD and hybrid setups from modern threats. The training is technical and deep-dives into core protocols such as OAuth2 and application concepts. It includes many labs and hands-on exercises, set up as challenges to gain access to accounts and elevate privileges. More info on the topics covered is available on our website.

Event information

This edition of the training takes place in The Hague, the Netherlands. It is a 3-day edition covering the topics explained on the training page. The training and all course materials are in English only. The training takes place at an event location at The Hague Central train station, which is easily accessible by both car and public transport from many places in The Netherlands. Since the station is located right at the edge of the city center, it is also a good opportunity to visit one of the most beautiful cities of the Netherlands if you are coming in from abroad.

Requirements

To participate in the training exercises, participants will need a laptop with a virtualization platform (such as VMWare Workstation / Player) with a virtual machine that can be used for the labs in the training. Most exercises can be done from both Linux or Windows, but some specific exercises require Windows or a Windows virtual machine. Note that Windows on ARM does not support some of the tools used during the training. If you are using a corporate laptop, please make sure that you have unrestricted internet access to connect to the lab VPN and authenticate to other Azure AD tenants.

Payment methods
We support direct payment via iDeal and credit card or payment by bank transfer. If your organization has specific requirements for invoicing or it has a complex purchasing procedure, please get in touch with us first to prevent tickets being canceled due to payment delays. Payment via bank transfer or custom invoice is only available until 2 weeks before the training starts. Any ticket purchases after this should be done using a direct payment method.

Cancellation and refunds
It is possible to cancel up to 2 weeks before the training starts. Training tickets are non-refundable, however we will provide a voucher that can be used for a future public version of this training (limited to self-organized events only).

More questions
If you have any other questions about the training, please get in touch with us