Korstiaan Stam - Incident Response in the Microsoft Cloud $2,500 April 2025

DESCRIPTION: This training covers both Microsoft 365 and Microsoft Azure, you’ll get hands-on experience with investigating attacks, acquisition of forensic artifacts from the cloud and digging through the relevant artifacts. Everything is related to real life threats observed against the Microsoft cloud. The trainer has real life experience with incident response and forensic investigations in the cloud, knowledge will be shared that's not available on any public resource. THINGS YOU’LL LEARN: A complete working knowledge of Cloud infrastructure The ability to investigate and respond to all cloud incidents LABS YOU’LL PARTICIPATE IN: Exercise: Exploring the training environment Exercise: Acquisition and analysis of Azure logs Exercise: KQL querying Exercise: Building your own Graph app for IR Exercise: Investigate a cloud compromise in Azure Exercise: Azure CTF Exercise: Acquisition & Exploration of the UAL Exercise: Investigating an espionage campaign in Microsoft 365 Exercise