Training summary

Over the past years more and more companies adopted Microsoft Entra (formerly Azure AD) as an identity platform for their cloud services, often using their existing on-prem Active Directory as a source for a hybrid setup. As a red teamer, pentester, or security architect, you are probably familiar with Active Directory security concepts. Entra ID is vastly different and is built around different concepts and protocols.

This training explains how organizations use Entra ID to manage modern cloud-based or hybrid environments and what security challenges this brings. It is the result of many years of research into the protocols and internals of Entra ID. It will give you the knowledge to analyze, attack, and secure Entra ID and hybrid setups from modern threats. The training is technical and deep-dives into core protocols such as OAuth2 and application concepts. It includes many labs and hands-on exercises, set up as challenges to gain access to accounts and elevate privileges. More info on the topics covered is available on our website.

Event information

This is a special 4-day edition of the Entra ID training. The training takes place in The Hague, the Netherlands. In this 4-day edition, we will cover the topics explained on the training page, with an extra day to cover additional hybrid labs and some of the newer techniques that were released in the past year. The training takes place at an event location at The NH Hotel, in the The Hague World Trade Center, which is easily accessible by both car and public transport from many places in The Netherlands. The training and all course materials are in English only.

Requirements

To participate in the training exercises, participants will need a laptop with a virtualization platform (such as VMWare Workstation / Player) with a virtual machine that can be used for the labs in the training. All exercises can be done from both Windows or Linux based virtual machines, if you are unsure which one to choose, a Windows machine is recommended. If you are using a corporate laptop, please make sure that you have unrestricted internet access to connect to the lab VPN and authenticate to other Azure AD tenants.

Payment methods
We support direct payment via iDeal and credit card or payment by bank transfer. If your organization has specific requirements for invoicing or it has a complex purchasing procedure, please get in touch with us first to prevent tickets being canceled due to payment delays. Payment via bank transfer or custom invoice is only available until 2 weeks before the training starts. Any ticket purchases after this should be done using a direct payment method.

Cancellation and refunds
It is possible to cancel up to 2 weeks before the training starts. Training tickets are non-refundable, however we will provide a voucher that can be used for a future public version of this training (limited to self-organized events only).

More questions
If you have any other questions about the training, please get in touch with us