Entra ID: Attack & Defense Playbook

Entra ID: Attack & Defense Playbook

Microsoft expert examines Entra ID playbook, token and PRT attacks, TPM and device compliance, Entra Connect security Entra ID Attack and Defense Playbook: A five-year community project by Sami Lamppu and Thomas Naunheim that documents real attack scenarios against Microsoft Entra ID and practical defenses.It serves as a living guide for security teams and is updated with new research and fixes. Complex token attacks: The authors detail advance…

Weaponized AzureHound Targets Azure and Entra ID

Threat actors are increasingly weaponizing AzureHound — a legitimate penetration testing tool — to conduct reconnaissance and privilege escalation within Microsoft Azure and Entra ID environments.  Originally designed to assist security professionals, the open-source tool has become a powerful asset for adversaries seeking to infiltrate cloud infrastructures. “Threat actors misuse this tool to enumerate Azure resources and map potential attack p…