XINTRA - Attacking and Defending Azure & M365

SOF-ELK Ingested.zip

Videos/5. Reconnaissance & Enumeration/4. ATTACK - Post exploitation reconnaissance.ts

Videos/7. Credential Theft/2. ATTACK - Golden SAML attack.ts

Videos/2. Overview of Azure_M365/3. Overview of Azure_M365 Lecture.ts

Videos/8. Lateral Movement Techniques/8. ATTACK - Abusing managed identities.ts

Videos/8. Lateral Movement Techniques/2. ATTACK - Pass the PRT.ts

Videos/4. Log Analysis Using SOF-ELK/2. SOF-ELK Overview and Setup.ts

Videos/6. Initial Access Techniques/15. ATTACK - M365 Business email compromise.ts

Videos/9. Privilege Escalation/6. ATTACK - Abusing User Administrator.ts

Videos/5. Reconnaissance & Enumeration/2. ATTACK - Enumerate users and domains.ts

Videos/6. Initial Access Techniques/16. DETECT - M365 Business email compromise.ts

Videos/6. Initial Access Techniques/12. ATTACK - Device code authentication abuse.ts

Videos/9. Privilege Escalation/3. ATTACK - Abusing Cloud Administrator.ts

Videos/10. Persistence Techniques/14. ATTACK - Compromising Azure Blobs & Storage Accounts.ts

Videos/7. Credential Theft/8. ATTACK - Skeleton Keys (PTA Abuse).ts

Videos/10. Persistence Techniques/8. ATTACK - Service Principal Abuse.ts

Videos/6. Initial Access Techniques/9. ATTACK - OAuth Abuse.ts

Videos/6. Initial Access Techniques/7. DETECT - OWA Password Spraying.ts

Videos/10. Persistence Techniques/2. ATTACK - AAD federated Backdoor.ts

Videos/7. Credential Theft/3. DETECT - Golden SAML attack.ts

Videos/6. Initial Access Techniques/13. DETECT - Device code authentication abuse.ts

Videos/6. Initial Access Techniques/10. DETECT - OAuth Abuse.ts

Videos/6. Initial Access Techniques/3. ATTACK - Password Spraying M365.ts

Videos/10. Persistence Techniques/11. ATTACK - Automation Account Abuse.ts

Videos/1. Introduction/1. Introduction.ts

Videos/11. Defense Evasion/8. ATTACK - Registering Fake Agents for Log Spoofing.ts

Videos/11. Defense Evasion/5. ATTACK - Spoofing Azure Sign-in Logs.ts

Videos/7. Credential Theft/11. ATTACK - Stealing access tokens from Office Apps.ts

Videos/7. Credential Theft/5. ATTACK - Attacking key vaults.ts

Videos/10. Persistence Techniques/9. DETECT - Service Principal Abuse.ts

Videos/7. Credential Theft/9. DETECT - Skeleton Keys (PTA Abuse).ts

Videos/10. Persistence Techniques/12. DETECT - Automation Account Abuse.ts

Videos/8. Lateral Movement Techniques/5. ATTACK - Pass the cookie.ts

Videos/6. Initial Access Techniques/11. MITIGATE - OAuth Abuse.ts

Videos/9. Privilege Escalation/7. DETECT - Abusing User Administrator.ts

Videos/8. Lateral Movement Techniques/11. ATTACK - Virtual Machine Abuse.ts

Videos/6. Initial Access Techniques/6. ATTACK - OWA Password Spraying.ts

Videos/7. Credential Theft/6. DETECT - Attacking key vaults.ts

Videos/5. Reconnaissance & Enumeration/5. DETECT - Post exploitation reconnaissance.ts

Videos/10. Persistence Techniques/17. ATTACK - Malicious Device Join.ts

Videos/8. Lateral Movement Techniques/12. DETECT - Virtual Machine Abuse.ts

Videos/11. Defense Evasion/6. DETECT - Spoofing Azure Sign-in Logs.ts

Videos/8. Lateral Movement Techniques/3. DETECT - Pass the PRT.ts

Videos/10. Persistence Techniques/15. DETECT - Compromising Azure Blobs & Storage Accounts.ts

Videos/9. Privilege Escalation/4. DETECT - Abusing Cloud Administrator.ts

Videos/6. Initial Access Techniques/4. DETECT - Password Spraying M365.ts

Videos/9. Privilege Escalation/2. Abusing Azure AD_RBAC roles.ts

Videos/8. Lateral Movement Techniques/6. DETECT - Pass the cookie.ts

Videos/8. Lateral Movement Techniques/9. DETECT - Abusing managed identities.ts

Videos/7. Credential Theft/17. ATTACK - Hunting credentials in previous deployment.ts