Workplace Ninja Summit 2024: Full Schedule

13:15 CEST

Forward to the Past and Back to the Future - Cybercrime in 2023/2024

Monday September 16, 2024 13:15 - 14:15 CEST

Join Sami Laiho, Chief Research Officer of Adminize, for a look back in to what 2023 changed in the Security Threat Landscape and to hear his predictions on what will the future have in store for us.

Speakers

Sami Laiho

Chief Research Officer, Matti Laiho Oy

Sami Laiho is one of the world's leading professionals in the Windows OS and Security. Sami has been working with and teaching OS troubleshooting, management, and security since 1995. Sami's session was evaluated as the best session in TechEd North America, Europe and Australia in... Read More →

Sami Laiho F2PandB2F pdf

Monday September 16, 2024 13:15 - 14:15 CEST
Luzerner Saal

Security

Session format Breakout session (60 min)
Subjects Endpoint Management, Microsoft Intune, Security, AVD, Azure AD, Windows 365, Conditional Access, Windows Client OS, Linux, Identity, Sentinel, MicrosoftXDR, Zero Trust, Security Copilot
Level Intermediate

14:30 CEST

Navigating the Battlefield: Leveraging MITRE ATT&CK Tactics

Monday September 16, 2024 14:30 - 15:30 CEST

Clubraum 1

The current threat landscape necessitates organizations to proactively detect and remediate vulnerabilities before attackers discover and exploit them. The MITRE ATT&CK framework acts as a repository of tactics, techniques, and procedures that security professionals use to understand the behavior of attackers. Using the MITRE ATT&CK knowledge base that maps external and internal TTP, red teams can develop threat models and methodologies for more effective attacks. Researching the TTP through MITRE ATT&CK will enable analysts and defenders to better understand threats against their organizations or enterprises.

The session aims to better understand the importance of MITRE ATT&CK tactics in a live demo. The session will also demonstrate how Microsoft products use MITRE ATT&CK for SOC operations.

In the session:
- An introduction to MITRE ATT&CK tactics and techniques
- Designing breach and attack simulations process with the help of MITRE ATT&CK
- How Microsoft 365 Defender and Microsoft Sentinel use MITRE ATT&CK

Speakers

Sergey Chubarov

Ethical Hacker

Sergey Chubarov is a Security and Cloud Expert, Instructor with 15+ years' experience on Microsoft technologies.His day-to-day job is to help companies securely embrace cloud technologies.He has certifications and recognitions such as Microsoft MVP: Security, OSCP, OSEP, eCPPT, eCPTX... Read More →

MITRE WPNinja pptx

Monday September 16, 2024 14:30 - 15:30 CEST
Clubraum 1

Security

Session format Breakout session (60 min)
Subjects Security, MicrosoftXDR, Security Copilot
Level Advanced

15:45 CEST

Navigating the SaaS Attack Landscape: How Microsoft Defender for Cloud Apps Can Protect Your Busines

Monday September 16, 2024 15:45 - 16:45 CEST

Clubraum 1

In this session, we delve into the evolving threats within the SaaS application ecosystem, examining recent trends and the innovative techniques employed by adversaries. We will explore the challenges faced by defenders in securing the SaaS surface against emerging attack techniques. We will discuss the importance of Microsoft Defender for Cloud Apps as part of Microsoft Defender XDR in scoping and containing sophisticated attacks. Additionally, we will address the critical role of SaaS Security Posture Management (SSPM) in early identification of risky configurations and the necessity for a research-led approach to SSPM enhancements. Join us as we share insights on recent product advancement to stay ahead of the adversary pace.

Speakers

Ran Marom

Group Product Manager, Microsoft

Ran is the group product manager for Microsoft Defender for Cloud Apps, previously to Microsoft Ran was leading security products in different domains such as cloud-native and network security

Maayan Bar-Niv

General Manager, Defender for Cloud Apps, Microsoft

Maayan Bar-Niv serves as the General Manager of Microsoft Defender for Cloud Apps, where she leads the charge in advancing SaaS threat protection in Microsoft Security. With a rich background in cybersecurity and IT solutions, over a decade at Microsoft, and a track record of spearheading... Read More →

Navigating the SaaS Attack Landscape How Microsfot Defender for Cloud Apps Can Protect Your Business pdf

Monday September 16, 2024 15:45 - 16:45 CEST
Clubraum 1

Security, Defender for Cloud Apps

Session format Breakout session (60 min)
Subjects Azure AD, Sentinel, Security, MicrosoftXDR
Level Advanced
Area Microsoft

17:00 CEST

Eliminate privileged Entra roles in your tenant

Monday September 16, 2024 17:00 - 18:00 CEST

Auditorium

Environments with multiple Global Administrators, Intune Administrators and Security Administrators are a nightmare for every Microsoft Security Consultant.
Therefore it is important to implement least privilege, protect critical access and apply just in time access.

During this session we will in take a deep dive into the world of Intune Scope Tags, Entra Administrative Units, Defender Device groups and how to leverage access to those objects using Privileged Identity Management.

We provide you valuable insights from our experience deploying these solutions with large enterprise customers.

Speakers

Janic Verboon

Senior Endpoint Engineer, baseVISION AG

Endpoint Engineer with interests in everything Intune & Entra related, enjoys a good beer 🍺 and is a big fan of heavy & loud music 🤘

Nicola Suter

Security Consultant & MVP, baseVISION

Building cyber defense with the latest Microsoft technology available today - to defeat tomorrows threats. Passionately curious about all things related to tech, real-world-proven about topics such as identity, endpoint management and security.

Eliminate privileged Entra roles in your tenant pdf

Monday September 16, 2024 17:00 - 18:00 CEST
Auditorium

Security, Role Based

Session format Breakout session (60 min)
Subjects Security, Microsoft Intune, Identity, Zero Trust, MicrosoftXDR, Azure AD
Level Expert

17:00 CEST

Unified SOC platform

Monday September 16, 2024 17:00 - 18:00 CEST

Clubraum 1

Presenting the next generation of SOC platforms - the unified platform bringing the power of out-of-the-box protection value of the XDR suite along with the customizability of SEIM, protecting all org assets.

Speakers

Hadar Feldman

XDR GPM, Microsoft

started my journey as a security researcher in the endpoint world, moved to building defender for endpoint experiences and capabilities as a product manager, and managed several product team focusing in investigation experience and protection toolset.

Monday September 16, 2024 17:00 - 18:00 CEST
Clubraum 1

Security

Session format Breakout session (60 min)
Subjects Security, Sentinel, Identity, MicrosoftXDR, Security Copilot
Level Intermediate

08:00 CEST

Detecting and responding to next generation threats with Defender for Office 365

Tuesday September 17, 2024 08:00 - 09:00 CEST

Clubraum 2

In this session we will cover how organizations are using Defender for Office 365 to detect and respond to new and emerging collaboration threats including phishing and BEC. We will walk through how SOC teams can be more effective and efficient using the power of XDR as well as build user resilience to new and emerging threats.

Speakers

Sumit Malhotra

Group Product Manager, Microsoft

Leading teams on our vision and delivery of enterprise security focused solutions for our M365 customers. Driving rapid improvements in end users and security teams' resilience to emerging threats through automation in awareness, detection, investigation and response.

Girish Chander

General Manager, Microsoft

Protecting against next gen email and collab threats pptx

Tuesday September 17, 2024 08:00 - 09:00 CEST
Clubraum 2

Security, XDR

Session format Breakout session (60 min)
Subjects Security, MicrosoftXDR, Automation
Level Advanced
Area Microsoft

10:40 CEST

Defending endpoints like a pro: path to mastery

Tuesday September 17, 2024 10:40 - 11:40 CEST

Auditorium

Have you always wanted to understand the inner workings of Defender for Endpoint, to improve your troubleshooting skills or to help customers get successfully set up in their unique environment?

Join this session to gain a deeper understanding of Defender for Endpoint, how it works, what to keep an eye on and how to ensure smooth operation in a variety of environments. We will walk through architecture, deployment, portal setup and (security) operations as well as troubleshooting - giving you the tools you need to defend endpoints like a pro!

In addition, you will get a glimpse of where the product is heading in the future.

Speakers

Paul Huijbregts

Principal Product Manager, Microsoft

Paul works at Microsoft as a Principal Product Manager for Defender for Endpoint. As a seasoned technologist and a subject matter expert in endpoint and cloud security, he is always open to gathering feedback for the product, sharing knowledge and helping others to be successful... Read More →

Defender for Endpoint Huijbregts Defending Endpoints Tues pptx

Tuesday September 17, 2024 10:40 - 11:40 CEST
Auditorium

Security, Defender for Endpoint

Session format Breakout session (60 min)
Subjects Security, Windows Client OS, Endpoint Management, MicrosoftXDR
Level Expert
Area Microsoft

12:40 CEST

Reimagine your security operations with a unified platform

Tuesday September 17, 2024 12:40 - 13:40 CEST

Luzerner Saal

Modern security teams use various tools like SIEM, XDR, SOAR, UEBA, exposure management, and threat intelligence. However, these tools generate a large number of alerts and security signals, making it difficult for security professionals to manage them efficiently. In this session, Ramya Chitrakar will discuss how a unified security operations platform can break down these silos with a seamless experience, allowing security admins and analysts to work more effectively to level up your company’s defenses and ultimately bring down your MTTR in the case of an attack.

Speakers

Ramya Chitrakar

Corporate Vice President - Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps and Microsoft Defender for Identity, Microsoft

Ramya Chitrakar is Corporate Vice President for core Security products, including Microsoft Defender for Cloud Apps, Microsoft Defender for Office 365, and Microsoft Defender for Identity all part of Microsoft Threat Protection and drives product strategy and engineering execution... Read More →

Tuesday September 17, 2024 12:40 - 13:40 CEST
Luzerner Saal

Security, Keynote

Session format Keynote
Subjects Security, Sentinel, Zero Trust, MicrosoftXDR, Security Copilot
Level Intermediate
Area Microsoft

14:00 CEST

Taking automated protection to the next level: Attack Disruption 2.0

Tuesday September 17, 2024 14:00 - 15:00 CEST

Clubraum 1

Automatic attack disruption, offered by Microsoft’s Unified Security and Operations Platform, provides out-of-the-box protection to its customers.

In this session, we will update you on the current status, recent advancements, and future plans in the area of threat intelligence and data-science based disruption.

The talk will also include a technical deep-dive into a real-life incident.
We will conclude by showing what you need to do to maximize the benefit of this powerful capability.

Speakers