#Azure AD

Speaking at ESPC23 - Protect your API with Entra ID

Dec 3, 2023 Speaking at ESPC23 - Protect your API with Entra ID

Hiding in plain Graph, an issue with Azure AD Audit log

Jul 7, 2023 Hiding in plain Graph, an issue with Azure AD Audit log

Proof of concept: Multi tenant managed identity

Dec 16, 2022 Proof of concept: Multi tenant managed identity

Hacking Primary refresh tokens, oops created a virus

Oct 18, 2022 Hacking Primary refresh tokens, oops created a virus

Using a managed identity as a client credential

Jun 21, 2022 Using a managed identity as a client credential

Federated credentials, wait what?

Jun 20, 2022 Federated credentials, wait what?

Protect against certificate extraction - Client credentials

May 27, 2022 Protect against certificate extraction - Client credentials

Extract all Azure AD admin accounts

May 17, 2022 Extract all Azure AD admin accounts

Extract all users with powershell and what you should do about it

May 16, 2022 Extract all users with powershell and what you should do about it

Access Azure AD protected API with managed Identity

Apr 21, 2022 Access Azure AD protected API with managed Identity