Workplace Ninja Summit 2024: Full Schedule

13:15 CEST

Forward to the Past and Back to the Future - Cybercrime in 2023/2024

Monday September 16, 2024 13:15 - 14:15 CEST

Join Sami Laiho, Chief Research Officer of Adminize, for a look back in to what 2023 changed in the Security Threat Landscape and to hear his predictions on what will the future have in store for us.

Speakers

Sami Laiho

Chief Research Officer, Matti Laiho Oy

Sami Laiho is one of the world's leading professionals in the Windows OS and Security. Sami has been working with and teaching OS troubleshooting, management, and security since 1995. Sami's session was evaluated as the best session in TechEd North America, Europe and Australia in... Read More →

Sami Laiho F2PandB2F pdf

Monday September 16, 2024 13:15 - 14:15 CEST
Luzerner Saal

Security

Session format Breakout session (60 min)
Subjects Endpoint Management, Microsoft Intune, Security, AVD, Azure AD, Windows 365, Conditional Access, Windows Client OS, Linux, Identity, Sentinel, MicrosoftXDR, Zero Trust, Security Copilot
Level Intermediate

15:45 CEST

Navigating the SaaS Attack Landscape: How Microsoft Defender for Cloud Apps Can Protect Your Busines

Monday September 16, 2024 15:45 - 16:45 CEST

Clubraum 1

In this session, we delve into the evolving threats within the SaaS application ecosystem, examining recent trends and the innovative techniques employed by adversaries. We will explore the challenges faced by defenders in securing the SaaS surface against emerging attack techniques. We will discuss the importance of Microsoft Defender for Cloud Apps as part of Microsoft Defender XDR in scoping and containing sophisticated attacks. Additionally, we will address the critical role of SaaS Security Posture Management (SSPM) in early identification of risky configurations and the necessity for a research-led approach to SSPM enhancements. Join us as we share insights on recent product advancement to stay ahead of the adversary pace.

Speakers

Ran Marom

Group Product Manager, Microsoft

Ran is the group product manager for Microsoft Defender for Cloud Apps, previously to Microsoft Ran was leading security products in different domains such as cloud-native and network security

Maayan Bar-Niv

General Manager, Defender for Cloud Apps, Microsoft

Maayan Bar-Niv serves as the General Manager of Microsoft Defender for Cloud Apps, where she leads the charge in advancing SaaS threat protection in Microsoft Security. With a rich background in cybersecurity and IT solutions, over a decade at Microsoft, and a track record of spearheading... Read More →

Navigating the SaaS Attack Landscape How Microsfot Defender for Cloud Apps Can Protect Your Business pdf

Monday September 16, 2024 15:45 - 16:45 CEST
Clubraum 1

Security, Defender for Cloud Apps

Session format Breakout session (60 min)
Subjects Azure AD, Sentinel, Security, MicrosoftXDR
Level Advanced
Area Microsoft

17:00 CEST

Unified SOC platform

Monday September 16, 2024 17:00 - 18:00 CEST

Clubraum 1

Presenting the next generation of SOC platforms - the unified platform bringing the power of out-of-the-box protection value of the XDR suite along with the customizability of SEIM, protecting all org assets.

Speakers

Hadar Feldman

XDR GPM, Microsoft

started my journey as a security researcher in the endpoint world, moved to building defender for endpoint experiences and capabilities as a product manager, and managed several product team focusing in investigation experience and protection toolset.

Monday September 16, 2024 17:00 - 18:00 CEST
Clubraum 1

Security

Session format Breakout session (60 min)
Subjects Security, Sentinel, Identity, MicrosoftXDR, Security Copilot
Level Intermediate

09:20 CEST

No Country for Old Hackers: A Journey inside Passwordless Authentication with Passkey’s

Tuesday September 17, 2024 09:20 - 10:20 CEST

Clubraum 1

Think you know Passwordless Authentication? Well, think again. In this deep dive session, Join Microsoft MVP, Andy Malone as he takes you on a journey inside the next generation of Passwordless authentication using FIDO technologies. Now that FIDO keys have become virtual and can be deployed via any mobile device or desktop. Design to thwart hackers and ensure your digital world remains secure. With discussions, demos, tips and advice. Andy will walk you through all aspects of exactly what Passkey’s are, how they work and of course how to manage them.

Speakers

Andy Malone

Microsoft 365 Expert, Worldwide Speaker, YouTuber, Tech Instructor, Author, Quality Training Ltd

Andy Malone MVP, MCTWinning the coveted Microsoft Speaker Idol competition in 2006 catapulted Andy into a prestigious international speaking career. Today, Andy is not only a world class conference speaker but is also a renowned security & technology expert who has delivered ground-breaking... Read More →

No Country for Old Hackers A Journey inside Passwordless Authentication with Passkey’s pdf

Tuesday September 17, 2024 09:20 - 10:20 CEST
Clubraum 1

Security, Password-less

Session format Breakout session (60 min)
Subjects Security, Azure AD, Sentinel, Zero Trust
Level Intermediate

12:40 CEST

Reimagine your security operations with a unified platform

Tuesday September 17, 2024 12:40 - 13:40 CEST

Luzerner Saal

Modern security teams use various tools like SIEM, XDR, SOAR, UEBA, exposure management, and threat intelligence. However, these tools generate a large number of alerts and security signals, making it difficult for security professionals to manage them efficiently. In this session, Ramya Chitrakar will discuss how a unified security operations platform can break down these silos with a seamless experience, allowing security admins and analysts to work more effectively to level up your company’s defenses and ultimately bring down your MTTR in the case of an attack.

Speakers

Ramya Chitrakar

Corporate Vice President - Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps and Microsoft Defender for Identity, Microsoft

Ramya Chitrakar is Corporate Vice President for core Security products, including Microsoft Defender for Cloud Apps, Microsoft Defender for Office 365, and Microsoft Defender for Identity all part of Microsoft Threat Protection and drives product strategy and engineering execution... Read More →

Tuesday September 17, 2024 12:40 - 13:40 CEST
Luzerner Saal

Security, Keynote

Session format Keynote
Subjects Security, Sentinel, Zero Trust, MicrosoftXDR, Security Copilot
Level Intermediate
Area Microsoft

15:20 CEST

AI for Next-Gen Security: OpenAI and Copilot for Security Synergy

Tuesday September 17, 2024 15:20 - 16:20 CEST

Clubraum 2

This demo-based session explores the potent collaboration between OpenAI and Copilot for Security.

Discover how the fusion of artificial intelligence is revolutionizing threat detection, response strategies, and proactive risk mitigation.

The session contains following topics:
- How AI used by attackers
- How Copilot for Security works
- Setting up security using with AI
- Detect threats with the AI-assistant
- Give a quick and informative AI-driven response
- A few words about licensing

Speakers

Sergey Chubarov

Ethical Hacker

Sergey Chubarov is a Security and Cloud Expert, Instructor with 15+ years' experience on Microsoft technologies.His day-to-day job is to help companies securely embrace cloud technologies.He has certifications and recognitions such as Microsoft MVP: Security, OSCP, OSEP, eCPPT, eCPTX... Read More →

AI WPNinja pptx

Tuesday September 17, 2024 15:20 - 16:20 CEST
Clubraum 2

Security, AI

Session format Breakout session (60 min)
Subjects Sentinel, Security, Security Copilot
Level Advanced

10:40 CEST

Zero Trust - Dope or Nope?

Wednesday September 18, 2024 10:40 - 11:40 CEST

Auditorium

Zero Trust must be the worst name in the history of Security. But is it just a bad name? Does it really offer worthwhile goals or is it an overkill? I hear sales pitches for it, like for many other security solutions, that concentrate on "What we can't allow anymore because of changed security landscape" all the time. Why does security have to be so negative? A well done Zero Trust environment gives you "the ability to work as efficiently and securely, whether you are sitting in Starbucks or the corporate office" - Which I believe most of us want. Come and listen to this talk about rights and wrongs of how to achieve Zero Trust and how keep Security as what it's meant to be - a support function for a happy workforce.

Speakers

Sami Laiho

Chief Research Officer, Matti Laiho Oy

Sami Laiho Zero Trust Dope or Nope pdf

Wednesday September 18, 2024 10:40 - 11:40 CEST
Auditorium

Security

Session format Breakout session (60 min)
Subjects Endpoint Management, Microsoft Intune, Security, Conditional Access, Sentinel, Windows 365, Identity, MicrosoftXDR, Zero Trust
Level Intermediate

12:15 CEST

Tips and Tricks from a baseVISION Security Engineer

Wednesday September 18, 2024 12:15 - 12:35 CEST

Community stage

Have you ever wondered what it is like to be a Security Engineer at baseVISION? In this session, sponsored by baseVISION, I'll show you how the company enables me to deliver the best service to my customers. I'll also cover a technical part where I'll talk about a current customer security project I'm working on. This will give you an insight into my daily life and I’ll also share some practical tips and tricks around my work.

Speakers

Loris Ambrozzo

Senior Security Engineer, baseVISION AG

Loris is a Senior Security Engineer at baseVISION AG, where he supports customers in improving the security posture of their environments. He's interested in various security and identity topics such as Microsoft Defender XDR, Microsoft Entra and Microsoft Sentinel.

TipsAndTricksFromAbaseVISIONSecurityEngineer pptx

Wednesday September 18, 2024 12:15 - 12:35 CEST
Community stage

Sponsor

Session format Gold Sponsor
Subjects Security, Sentinel, MicrosoftXDR, Security Copilot, Identity, Azure AD, Conditional Access
Level Intermediate

14:00 CEST

Exceptional Detections in Your Microsoft Security Stack

Wednesday September 18, 2024 14:00 - 15:00 CEST

Clubraum 1

In session where we learn the fundamental concepts of detection engineering and receive guidance on creating the best detections in your Microsoft Security stack

Speakers

Gianni Castaldi

Kustoking and NinjaCat, KustoWorks

Gianni Castaldi is a NinjaCat @ KustoWorks, he started in IT in 2008 and in cybersecurity since 2017. His blogs can be read at kustoking.com and on medium.com/@giannicastaldiHe spends most of his time securing companies with the Microsoft Security Stack, Palo Alto Networks, and Tenable... Read More →

Creating exceptional security detections within Your Microsoft Security stack pdf

Wednesday September 18, 2024 14:00 - 15:00 CEST
Clubraum 1

Security

Session format Breakout session (60 min)
Subjects Security, Sentinel, MicrosoftXDR
Level Advanced

17:45 CEST

Microsoft Ask Me Anything - Microsoft Leadership

Wednesday September 18, 2024 17:45 - 19:00 CEST

Luzerner Saal

Come ask Microsoft leadership all of your questions

Speakers

Sumit Malhotra

Group Product Manager, Microsoft

Leading teams on our vision and delivery of enterprise security focused solutions for our M365 customers. Driving rapid improvements in end users and security teams' resilience to emerging threats through automation in awareness, detection, investigation and response.

Martin Schvartzman

Principal Product Manager, Microsoft

Martin is a Principal Product Manager in the Microsoft Defender for Identity team. Has over 20 years of experience in the technology industry, primarily around IT and Cyber Security with vast knowledge of Cloud Services. Martin is passionate about technology and innovation, and he... Read More →

Lior Arviv

Senior Product Manager, Microsoft

Lior Arviv is a Senior Product Manager on the Defender for Cloud team, with over 15 years of experience in Microsoft technologies, particularly in cloud services and security. Passionate about innovation, Lior is dedicated to developing products that simplify complex challenges and... Read More →

Ran Marom

Group Product Manager, Microsoft

Ran is the group product manager for Microsoft Defender for Cloud Apps, previously to Microsoft Ran was leading security products in different domains such as cloud-native and network security

Talal Alqinawi

SR Director, Microsoft

Talal Alqinawi is a seasoned executive leader specializing in cloud marketing and product strategy. With over 22 years at Microsoft, Talal has a proven track record in driving digital transformation through SaaS/IaaS cloud solutions, sales models, marketing & GTM strategy, and business... Read More →

Lior Bela

Bringing the Spark to Endpoint Managment, Microsoft

Lior is the Director of Intune with focus on business growth, customer & partner relationships, and the owner of the Intune MVP community

Scott Manchester

Vice President, Windows 365 and Azure Virtual Desktop, Microsoft

Scott Manchester is the Vice President of Program Management for Windows Cloud Experience. He is a 24 year veteran at Microsoft where he has led the development of Windows 365, Azure Virtual Desktop, Remote Desktop Service, Second Screen Remoting, Multimedia, and Networking technologies... Read More →

Jeff Pinkston

Vice President, Management Engineering, Microsoft

I am Jeff Pinkston, and most people at Microsoft call me by my nickname - Pinky. I am the Vice President of Engineering for the Management team for SCCM and Intune. I love talking to customers to learn where we can do better, and then making that happen. Personally, I love the outdoors... Read More →

Stefan Kinnestrand

Vice President, Cloud Endpoint Microsoft, Microsoft

Stefan Kinnestrand is the leader of the marketing and GTM strategy for Cloud Endpoints, which aims to advance and transform commercial end user computing for all information and frontline workers. His team oversees Windows Commercial (Windows Client, Windows 365 & Azure Virtual Desktop... Read More →

Brett Flegg

Partner Software Architect, Microsoft

Brett is a software architect and tech blogger who has spent the last two decades building tools and services that enable enterprises to get the most out of their IT infrastructure. The software he has developed (System Center Configuration Manager, Microsoft Endpoint Manager Intune... Read More →

Wednesday September 18, 2024 17:45 - 19:00 CEST
Luzerner Saal

General, AMA

Session format AMA
Subjects Microsoft Intune, Security, Azure AD, AVD, Copilot, Windows 365, Windows Client OS, Compliance, Configuration Manager, Linux, Apple (iOS/macOS), Automation, ChromeOS, Identity, Conditional Access, Endpoint Analytics, Autopilot, Sentinel, MicrosoftXDR, Pac
Level Advanced

08:00 CEST

Securing the Unseen: Microsoft Defender for IoT Explained

Thursday September 19, 2024 08:00 - 09:00 CEST

Clubraum 2

As organizations increasingly adopt Internet of Things (IoT) devices, ensuring their security becomes paramount. Microsoft Defender for IoT offers a multi-layered defense approach, combining agentless monitoring via passive network traffic analysis (NTA) with endpoint micro-agents. In this session, we’ll delve into the architecture, deployment strategies, and real-world use cases of Defender for IoT. Join us to learn how to protect your IoT devices effectively and enhance your overall security posture.

Speakers

Alain Schneiter

Partner | Solutions Architect, scopewyse GmbH

Alain (Al) Schneiter is one of the scopewyse founders and an Microsoft Secuirty MVP. As an experienced solutions architect he is supporting clients and partners in training, concepts, designs and implementations using cloud solutions from Microsoft Azure and Microsoft 365. Alain is... Read More →

Thursday September 19, 2024 08:00 - 09:00 CEST
Clubraum 2

Security, IOT

Session format Breakout session (60 min)
Subjects MicrosoftXDR, Zero Trust, Sentinel
Level Advanced

10:40 CEST

Control Plane under Control: Securing Privileged Access by Microsoft Enterprise Access Model

Thursday September 19, 2024 10:40 - 11:40 CEST

Clubraum 1

Over the last years, Microsoft has released many design principles, best practices and security concepts for securing privileged access in a Microsoft Cloud environment. This includes also the "Enterprise Access Model" as an evolution of the previously known (Active Directory) ESAE approach.

But what are real-world experiences and examples of implementing those reference architecture? Which security controls should be applied? Who and what should be defined as "Tier0" or "Control Plane"? Which privilege escalation paths should be considered even in a tiered administration model?

In this demo-drive session, I will share my learnings and practical approach to identify, protect and monitor the high-privileged assets in Microsoft Entra. We will go through related features and monitoring capabilities but also limitations to implement a tiered administration model in a cloud environment. In addition, I will show insights of my free commmunity tool "EntraOps" which allows to automate classification and protection of privileged assets in your environment.

Speakers

Thomas Naunheim

Thomas Naunheim is a Cyber Security Architect from Germany and with focus on identity and security solutions in Microsoft Azure. He is working for glueckkanja AG and part of projects to design and implement Microsoft cloud identity and security solutions in enterprise environments.You... Read More →

Control Plane under Control pdf

Thursday September 19, 2024 10:40 - 11:40 CEST
Clubraum 1

Security, Identity

Session format Breakout session (60 min)
Subjects Azure AD, Sentinel, Identity, MicrosoftXDR, Zero Trust
Level Advanced

14:00 CEST

Azure Firewall and Virtual Desktops - Better Together

Thursday September 19, 2024 14:00 - 15:00 CEST

Deuxième

Securing and monitoring network traffic for Azure Virtual Desktop and Windows 365 is an often overlooked but important topic to meet network security requirements. Within this session you will explore the capabilities of Azure Firewall in combination with AVD, Windows 365 and Microsoft Sentinel and learn some of the recommended networking patterns to secure your virtual desktop deployments on the network layer.

Speakers

Nicola Suter

Security Consultant & MVP, baseVISION

Building cyber defense with the latest Microsoft technology available today - to defeat tomorrows threats. Passionately curious about all things related to tech, real-world-proven about topics such as identity, endpoint management and security.

Janic Verboon

Senior Endpoint Engineer, baseVISION AG

Endpoint Engineer with interests in everything Intune & Entra related, enjoys a good beer 🍺 and is a big fan of heavy & loud music 🤘

Azure Firewall and Virtual Desktops Better Together pdf

Thursday September 19, 2024 14:00 - 15:00 CEST
Deuxième

Windows 365 / AVD

Session format Breakout session (60 min)
Subjects AVD, Windows 365, Security, Sentinel
Level Advanced

15:20 CEST

Enrich your Windows 11 MDE advanced hunting data with Sysmon

Thursday September 19, 2024 15:20 - 16:20 CEST

Clubraum 2

Defender for Endpoint is a superb data source for custom detections and the data can even be used to troubleshoot IT operations.
But as most of you are aware, MDE is also notoriously known for dedeplucating data and the dataset collected is defined by Microsoft.

If you want more flexibility Sysmon is an amazing data source for additional information and with the new Azure Monitor agent on Windows client devices the data ingestion into Microsoft Sentinel (Log Analytics) is easier than ever.

At the end of the session you will know how to implement the proposed solution, where you will find configurations to get started and what are the pitfalls in the current version.

Speakers

Fabian Bader

Cyber Security Architect, glueckkanja AG

Fabian Bader is a Cyber Security Architect and Microsoft MVP from Germany. He focuses on security and cloud solutions and works mainly with Microsoft technologies.From Azure cloud to on-premises Active Directory, he likes to automate stuff with PowerShell.Besides being a speaker at... Read More →

Enrich your Windows 11 MDE advanced hunting data with Sysmon pdf

Thursday September 19, 2024 15:20 - 16:20 CEST
Clubraum 2

Security, Windows

Session format Breakout session (60 min)
Subjects Security, Sentinel, Windows Client OS, MicrosoftXDR
Level Expert

16:40 CEST

Plan you log ingestions to Microsoft Sentinel

Thursday September 19, 2024 16:40 - 17:40 CEST

Clubraum 2

One of the main reasons to decide to use Microsoft Sentinel, is the ability to connect additional log sources and expand your security coverage.
With literally hundreds of content hub solutions available and in many companies a nearly matching amount of data sources available, it's sometimes hard to decide on which to focus first.

In this session I will share my experience and best practices to prioritize and add new data sources, based on the actual needs of the security operations teams.
What are good ingestion configurations to get the alerts you want without having to spent a fortune?

Speakers

Fabian Bader

Cyber Security Architect, glueckkanja AG

Plan you log ingestions to Microsoft Sentinel pdf

Thursday September 19, 2024 16:40 - 17:40 CEST
Clubraum 2

Security, Logging

Session format Breakout session (60 min)
Subjects Sentinel, MicrosoftXDR
Level Advanced