Intro

This chapter explores the complexities of Azure security, revealing how attackers exploit features to remain undetected. It provides critical insights for those new to Azure or involved in mergers and acquisitions, including advanced techniques for identifying suspicious activities in log analytics workspaces.

Transcript

chevron_right

Play full episode

chevron_right

Transcript

Episode notes

In this episode, Ashish sits down with Christian Philipov, Principal Security Consultant at WithSecure, to explore the stealth tactics threat actors are using in Azure and why many of these go undetected.

Christian breaks down the lesser-known APIs like Ibiza and PIM, how Microsoft Graph differs from legacy APIs, and what this means for defenders.