Workplace Ninja Summit 2024: Full Schedule

arrow_back View All Dates

08:00 CEST

Securing the Unseen: Microsoft Defender for IoT Explained

Thursday September 19, 2024 08:00 - 09:00 CEST

As organizations increasingly adopt Internet of Things (IoT) devices, ensuring their security becomes paramount. Microsoft Defender for IoT offers a multi-layered defense approach, combining agentless monitoring via passive network traffic analysis (NTA) with endpoint micro-agents. In this session, we’ll delve into the architecture, deployment strategies, and real-world use cases of Defender for IoT. Join us to learn how to protect your IoT devices effectively and enhance your overall security posture.

Speakers

Alain Schneiter

Partner | Solutions Architect, scopewyse GmbH

Alain (Al) Schneiter is one of the scopewyse founders and an Microsoft Secuirty MVP. As an experienced solutions architect he is supporting clients and partners in training, concepts, designs and implementations using cloud solutions from Microsoft Azure and Microsoft 365. Alain is... Read More →

Thursday September 19, 2024 08:00 - 09:00 CEST
Clubraum 2

Security, IOT

Session format Breakout session (60 min)
Subjects MicrosoftXDR, Zero Trust, Sentinel
Level Advanced

09:20 CEST

Copilot for Security

Thursday September 19, 2024 09:20 - 10:20 CEST

Clubraum 2

Deep dive in Copilot for Security which will encompass a combination of embedded functionalities as well as standalone use cases.

Speakers

Gabriel Tiberiu Damaschin

Product Manager - Copilot for Security - Microsoft, Microsoft

I am a Product Manager with a keen focus on Copilot for Security. My expertise in this domain has been central to spearheading advancements and delivering robust cybersecurity solutions. I am deeply invested in understanding the intricacies of the security landscape and am committed... Read More →

Thursday September 19, 2024 09:20 - 10:20 CEST
Clubraum 2

Security

Session format Breakout session (60 min)
Subjects Security Copilot, MicrosoftXDR
Level Expert
Area Microsoft

10:40 CEST

Expand OSDCloud: Script Automation

Thursday September 19, 2024 10:40 - 11:40 CEST

Clubraum 2

OSDCloud is a Community developed Cloud OS Deployment solution for deploying Windows from the Cloud.

Not everyone installs Windows en-US. Akos has deploying Windows using OSDCloud for customers based on their needs. This requires customization of the OSDCloud WinPE Boot Image by inecting PowerShell Scripts, or creating and storing PowerShell Scripts in the Cloud that can be updated at any time.

Speakers

David Segura

Microsoft MVP PowerShell | Software Product Manager, HP

During the day, I'm a Software PM for HP in Houston working on a PowerShell Script Project, and outside of business hours, I find time to work on OS Deployment. I've been a Microsoft MVP in PowerShell for 3 years and have enjoyed being able to build some really cool things that have... Read More →

Ákos Bakos

CEO & Solution Architect, SmartCon GmbH

Microsoft Cloud Security & Modern Work Meetup, Workplace Ninja User Group Switzerland (scheduled)

Expand OSDCloud Final pdf

Thursday September 19, 2024 10:40 - 11:40 CEST
Clubraum 2

Windows, OS Deployment

Session format Breakout session (60 min)
Subjects Autopilot, Windows Client OS
Level Expert

12:40 CEST

One Year of Fighting Adversary-in-the-Middle, notes from the field

Thursday September 19, 2024 12:40 - 13:40 CEST

Clubraum 2

Last 1,5 year we were faced with a new advanced phishing technique, called adversary-in-the-middle. This is an advanced method to bypass multiple forms of MFA.

In this session Kenneth and Erik we do a deep dive into this topic.

First of alll we start with a small demo of the AiTM case

Then we will go through our options to fight this by using differente strategies like implementing phising resistant MFA methodes or using simple Conditional Access policies, or advanced Entra ID P2 Protection methods.

After this session you will have enough information to stop this attack in several ways each with it's own advangtages and drawbacks.

Speakers

Erik Loef

CTO, Proxsys

CTO, MSc, CEH, MVP

Kenneth van Surksum

Modern Workplace Consultant, Secure At Work

As a Microsoft 365 Modern Workplace consultant I help customers implement modern workplace solutions based on top of theirMicrosoft 365 licensing, leveraging products like Microsoft Intune, Microsoft Entra, Microsoft Defender, Exchange Online, Microsoft Teams, Microsoft SharePoint... Read More →

WPNinja Summit 24 One year of fighting adversary in the middle notes from the field sched pdf

Thursday September 19, 2024 12:40 - 13:40 CEST
Clubraum 2

Security

Session format Breakout session (60 min)
Subjects Security, Conditional Access, Identity, Zero Trust
Level Advanced

14:00 CEST

Mastering Microsoft XDR: What is new in 2024?

Thursday September 19, 2024 14:00 - 15:00 CEST

Clubraum 2

Let's delve into the advanced capabilities and technical nuances of the Defender XDR stack, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, and the integration with Microsoft Sentinel. This technical session, tailored for cybersecurity professionals and IT practitioners, will provide an in-depth exploration of the latest features and enhancements across the Defender XDR suite as of 2024. From endpoint protection to cloud security, threat intelligence to incident response orchestration, this session will equip you with the knowledge and insights needed to harness the full power of the Defender XDR stack in defending against modern cyber threats.

Speakers

Gianni Castaldi

Kustoking and NinjaCat, KustoWorks

Gianni Castaldi is a NinjaCat @ KustoWorks, he started in IT in 2008 and in cybersecurity since 2017. His blogs can be read at kustoking.com and on medium.com/@giannicastaldiHe spends most of his time securing companies with the Microsoft Security Stack, Palo Alto Networks, and Tenable... Read More →

Mastering Microsoft XDR What is new in 2024 pptx

Thursday September 19, 2024 14:00 - 15:00 CEST
Clubraum 2

Security, What's new

Session format Breakout session (60 min)
Subjects Security, MicrosoftXDR
Level Intermediate

15:20 CEST

Enrich your Windows 11 MDE advanced hunting data with Sysmon

Thursday September 19, 2024 15:20 - 16:20 CEST

Clubraum 2

Defender for Endpoint is a superb data source for custom detections and the data can even be used to troubleshoot IT operations.
But as most of you are aware, MDE is also notoriously known for dedeplucating data and the dataset collected is defined by Microsoft.

If you want more flexibility Sysmon is an amazing data source for additional information and with the new Azure Monitor agent on Windows client devices the data ingestion into Microsoft Sentinel (Log Analytics) is easier than ever.

At the end of the session you will know how to implement the proposed solution, where you will find configurations to get started and what are the pitfalls in the current version.

Speakers

Fabian Bader

Cyber Security Architect, glueckkanja AG

Fabian Bader is a Cyber Security Architect and Microsoft MVP from Germany. He focuses on security and cloud solutions and works mainly with Microsoft technologies.From Azure cloud to on-premises Active Directory, he likes to automate stuff with PowerShell.Besides being a speaker at... Read More →

Enrich your Windows 11 MDE advanced hunting data with Sysmon pdf

Thursday September 19, 2024 15:20 - 16:20 CEST
Clubraum 2

Security, Windows

Session format Breakout session (60 min)
Subjects Security, Sentinel, Windows Client OS, MicrosoftXDR
Level Expert

16:40 CEST

Plan you log ingestions to Microsoft Sentinel

Thursday September 19, 2024 16:40 - 17:40 CEST

Clubraum 2

One of the main reasons to decide to use Microsoft Sentinel, is the ability to connect additional log sources and expand your security coverage.
With literally hundreds of content hub solutions available and in many companies a nearly matching amount of data sources available, it's sometimes hard to decide on which to focus first.

In this session I will share my experience and best practices to prioritize and add new data sources, based on the actual needs of the security operations teams.
What are good ingestion configurations to get the alerts you want without having to spent a fortune?

Speakers

Fabian Bader

Cyber Security Architect, glueckkanja AG

Plan you log ingestions to Microsoft Sentinel pdf

Thursday September 19, 2024 16:40 - 17:40 CEST
Clubraum 2

Security, Logging

Session format Breakout session (60 min)
Subjects Sentinel, MicrosoftXDR
Level Advanced