Azug @ Noest

26 September 2024

At a recent community event, I presented a deep dive into various authentication flows in Entra Id, showcasing how to retrieve an ARC server from a resource group. During the session, I reverse-engineered four main flows, with one having 3 sub-flows:

• Authorization Code Flow: Designed for user authentication
• Client Credentials Flow: Explored with certificate, secret, and federated credentials for service-to-service authentication.
• Device Code Flow: Highlighted for user interaction on devices with limited input capabilities.
• Managed Identity Flow: Demonstrated seamless authentication for services running on Azure without needing credentials. In this case I used an ARC-enrolled server.

Experts Live Netherlands

4 June 2024

I spoke together with my colleague Thijs Lecomte at Experts Live, where we talked about how we architecture a Security Operations Center on top of Defender XDR and Microsoft Sentinel. It was an amazing experience, and I definitely recommend going to the conference! If you missed the session, you can find the slide deck below.

Belgium Microsoft Cloud & Security Community

30 November 2023

"If you know the enemy and know yourself, you do not need to fear the result of a hundred battles." ~ Sun Tzu ⚔

I spoke at the Belgian Microsoft Cloud & Security Community on the 30th of November, hosted at The Collective Consulting. I talked about how we can leverage various MITRE toolsets in combination with the Microsoft Security stack, so we can arm us with vital knowledge about ourselves and our enemies.

Microsoft Sentinel User Forum

26 October 2023

Together with my colleague Louis Mastelinck, we talked on the Microsoft Sentinel user forum about Microsoft Sentinel data ingestion and avoiding alert fatigue. If you missed out on the session, you can find the slide deck below.

MC2MC

22 June 2023

My first public speaking experience! I spoke together with my colleague Sander Bougrine on MC2MC, where we deep dived into how to integrate 3th part data connectors with Microsoft Sentinel.