Navigating Detection Challenges in Azure Cloud Security

This chapter explores the nuances of detection and logging within Azure by differentiating between state-changing actions and read-only events. It emphasizes the importance of monitoring unauthorized access while employing various tools to bolster security in cloud environments.

Transcript

chevron_right

Play full episode

chevron_right

Transcript

Episode notes

In this episode, Ashish sits down with Christian Philipov, Principal Security Consultant at WithSecure, to explore the stealth tactics threat actors are using in Azure and why many of these go undetected.

Christian breaks down the lesser-known APIs like Ibiza and PIM, how Microsoft Graph differs from legacy APIs, and what this means for defenders.