T1: security in microsoft 365 and azure

Training Details

2-DAY TRAINING, 3-4 SEPTEMBER @ MEERVAART AMSTERDAM
TICKET PRICE: €1500 EX BTW


During this training you will learn about recognizing and exploiting Microsoft 365 and Azure-related vulnerabilities that arise from, among other things, misconfigurations and incorrect use of specific resources within such environments.

During this training you will learn:

  • Global structure of Microsoft 365 and Azure
  • The most frequent misconfigurations and related vulnerabilities within the Microsoft 365 and Azure environments
  • Methods to find/exploit vulnerabilities yourself in
  • The different Microsoft 365 services (Sharepoint, Teams, Power Automate)
  • Azure AD
  • Azure services (ARM)

You will also apply these topics in practice, because you will be hacking a fictitious company yourself.

More and more organisations use Azure and other Cloud providers without being aware of to what extent and in what way this can increase the attack surface of the organization. The complexity of the Microsoft 365 and Azure environments, with connections between the services and management portals, makes management of the environments very difficult. This complexity makes it easy to make mistakes during deployment and introduce vulnerabilities that can be exploited by malicious parties.

By hacking Microsoft 365 and Azure yourself you will gain a unique insight into the choices that need to be made during implementation of these kinds of environment and what kind of impact these choices have on the security of the environment. The S-Unit has extensive experience in these kinds of vulnerabilities and wants to share this knowledge with others.

Target audience

This training is for:

  • IT professionals with an interest in Azure hacking
  • (Azure) Cloud engineers with an interest in Azure security
  • Azure enthusiasts with an interest in ethical hacking
  • Not sure if this training is for you? Feel free to contact us!

Prior knowledge

For this training, participants should have basic experience with the various Microsoft 365 services and Azure.

Hardware requirements

A laptop on which applications can be installed and Powershell can be used.


DIRK VAN VEEN

Ethical Hacker & Founder - The S-Unit


Dirk van Veen is an ethical hacker and founder of The S-Unit with a master's degree in Computer Security. He started in 2011 as a penetration tester and within The S-Unit he is ultimately responsible for the technical side of all hacking and consultancy activities. Dirk enjoys exploring and finding vulnerabilities in new technologies, such as application frameworks, cloud platforms and low code solutions.

In addition to his work at The S-Unit, Dirk regularly organizes hack competitions for Hack in the Box (2012 - 2019) and Platform for Information Security (2014 - present) and he gives weekly ballroom dancing lessons to students in Amsterdam.