Workplace Ninja Summit 2024: Full Schedule

13:15 CEST

Windows 11 - Notes from the field

Monday September 16, 2024 13:15 - 14:15 CEST

Windows 11 has been out for 3 years, lets go over the notes from the field in how our customers have successfully moved to Windows 11, to give you insights on how you can be successful in ensuring that you are fully moved before Windows 10 goes end of life next year

Speakers

Harjit Dhaliwal

Senior Product Marketing Manager, Microsoft

Harjit Dhaliwal is a Senior Product Marketing Manager for Cloud Endpoints at Microsoft. Previously, he was a Customer Engineer at Microsoft where he focused on Modern Management solutions in the Microsoft 365 space to advocate and empower every person and company to achieve more... Read More →

Ken Goossens

Senior Product Manager - WSD, Microsoft

Ken is working as a Sr. Product Manager at the Windows Commercial CAT Team. Helping to drive adoption of Microsoft Windows 11, Windows Security, Windows Autopatch and Windows Copilot. Working with customers to remove deployment blockers, capturing insights and evidence to create new... Read More →

Windows 11 Notes from the field pdf

Monday September 16, 2024 13:15 - 14:15 CEST
Clubraum 1

Windows, Tips

Session format Breakout session (60 min)
Subjects Windows Client OS
Level Advanced
Area Microsoft

14:30 CEST

Navigating the Battlefield: Leveraging MITRE ATT&CK Tactics

Monday September 16, 2024 14:30 - 15:30 CEST

Clubraum 1

The current threat landscape necessitates organizations to proactively detect and remediate vulnerabilities before attackers discover and exploit them. The MITRE ATT&CK framework acts as a repository of tactics, techniques, and procedures that security professionals use to understand the behavior of attackers. Using the MITRE ATT&CK knowledge base that maps external and internal TTP, red teams can develop threat models and methodologies for more effective attacks. Researching the TTP through MITRE ATT&CK will enable analysts and defenders to better understand threats against their organizations or enterprises.

The session aims to better understand the importance of MITRE ATT&CK tactics in a live demo. The session will also demonstrate how Microsoft products use MITRE ATT&CK for SOC operations.

In the session:
- An introduction to MITRE ATT&CK tactics and techniques
- Designing breach and attack simulations process with the help of MITRE ATT&CK
- How Microsoft 365 Defender and Microsoft Sentinel use MITRE ATT&CK

Speakers

Sergey Chubarov

Ethical Hacker

Sergey Chubarov is a Security and Cloud Expert, Instructor with 15+ years' experience on Microsoft technologies.His day-to-day job is to help companies securely embrace cloud technologies.He has certifications and recognitions such as Microsoft MVP: Security, OSCP, OSEP, eCPPT, eCPTX... Read More →

MITRE WPNinja pptx

Monday September 16, 2024 14:30 - 15:30 CEST
Clubraum 1

Security

Session format Breakout session (60 min)
Subjects Security, MicrosoftXDR, Security Copilot
Level Advanced

15:45 CEST

Navigating the SaaS Attack Landscape: How Microsoft Defender for Cloud Apps Can Protect Your Busines

Monday September 16, 2024 15:45 - 16:45 CEST

Clubraum 1

In this session, we delve into the evolving threats within the SaaS application ecosystem, examining recent trends and the innovative techniques employed by adversaries. We will explore the challenges faced by defenders in securing the SaaS surface against emerging attack techniques. We will discuss the importance of Microsoft Defender for Cloud Apps as part of Microsoft Defender XDR in scoping and containing sophisticated attacks. Additionally, we will address the critical role of SaaS Security Posture Management (SSPM) in early identification of risky configurations and the necessity for a research-led approach to SSPM enhancements. Join us as we share insights on recent product advancement to stay ahead of the adversary pace.

Speakers

Ran Marom

Group Product Manager, Microsoft

Ran is the group product manager for Microsoft Defender for Cloud Apps, previously to Microsoft Ran was leading security products in different domains such as cloud-native and network security

Maayan Bar-Niv

General Manager, Defender for Cloud Apps, Microsoft

Maayan Bar-Niv serves as the General Manager of Microsoft Defender for Cloud Apps, where she leads the charge in advancing SaaS threat protection in Microsoft Security. With a rich background in cybersecurity and IT solutions, over a decade at Microsoft, and a track record of spearheading... Read More →

Navigating the SaaS Attack Landscape How Microsfot Defender for Cloud Apps Can Protect Your Business pdf

Monday September 16, 2024 15:45 - 16:45 CEST
Clubraum 1

Security, Defender for Cloud Apps

Session format Breakout session (60 min)
Subjects Azure AD, Sentinel, Security, MicrosoftXDR
Level Advanced
Area Microsoft

17:00 CEST

Unified SOC platform

Monday September 16, 2024 17:00 - 18:00 CEST

Clubraum 1

Presenting the next generation of SOC platforms - the unified platform bringing the power of out-of-the-box protection value of the XDR suite along with the customizability of SEIM, protecting all org assets.

Speakers

Hadar Feldman

XDR GPM, Microsoft

started my journey as a security researcher in the endpoint world, moved to building defender for endpoint experiences and capabilities as a product manager, and managed several product team focusing in investigation experience and protection toolset.

Monday September 16, 2024 17:00 - 18:00 CEST
Clubraum 1

Security

Session format Breakout session (60 min)
Subjects Security, Sentinel, Identity, MicrosoftXDR, Security Copilot
Level Intermediate

08:00 CEST

Let’s replace your VPN with a real Zero Trust Network Access !

Tuesday September 17, 2024 08:00 - 09:00 CEST

Clubraum 1

We've spent the last few years modernizing clients, kicking them out of Active Directory and optimizing them to run outside the corporate network. The use of modern protocols, conditional access and the integration of MDE and Intune now enables us to access cloud services with access management that largely complies with the principles of zero trust.

However, when it comes to accessing legacy apps in the old data center world, we unfortunately all too often fall back on the old solutions - perhaps enhanced with some SAML and certificates - and features such as microsegmentation and session revocation are sought in vain.

In this session I would like to discuss and show why Microsoft's SSE solution is so much closer to my understanding of Zero Trust Network Access by explicitly checking every session in the network during its establishment, limiting access to the least necessary and disconnecting in case of a breach.

As a security architect who used to deal intensively with networks and in recent years with identity, I am very much looking forward to a deep dive on the topic of Single SignOn when accessing the OnPrem environment with Private Access.

In addition to the way the technology works, you will learn what needs to be considered during POC and rollout and what differences there are to a classic VPN project.

Speakers

Christopher Brumm

Cyber Security Architect, glueckkanja AG

I am a big fan of Microsoft Cloud Security products because there my two favorite topics Identity and Security work together in a unique way. I've been working in IT for quite a while and have almost 15 years of experience in IT security in various roles. At the moment I am a Cybersecurity... Read More →

WPNinja24 Lets replace your VPN with a real Zero Trust Network Access pdf

Tuesday September 17, 2024 08:00 - 09:00 CEST
Clubraum 1

Security, Zero Trust

Session format Breakout session (60 min)
Subjects Security, Azure AD, Conditional Access, Identity, Zero Trust
Level Advanced

09:20 CEST

No Country for Old Hackers: A Journey inside Passwordless Authentication with Passkey’s

Tuesday September 17, 2024 09:20 - 10:20 CEST

Clubraum 1

Think you know Passwordless Authentication? Well, think again. In this deep dive session, Join Microsoft MVP, Andy Malone as he takes you on a journey inside the next generation of Passwordless authentication using FIDO technologies. Now that FIDO keys have become virtual and can be deployed via any mobile device or desktop. Design to thwart hackers and ensure your digital world remains secure. With discussions, demos, tips and advice. Andy will walk you through all aspects of exactly what Passkey’s are, how they work and of course how to manage them.

Speakers

Andy Malone

Microsoft 365 Expert, Worldwide Speaker, YouTuber, Tech Instructor, Author, Quality Training Ltd

Andy Malone MVP, MCTWinning the coveted Microsoft Speaker Idol competition in 2006 catapulted Andy into a prestigious international speaking career. Today, Andy is not only a world class conference speaker but is also a renowned security & technology expert who has delivered ground-breaking... Read More →

No Country for Old Hackers A Journey inside Passwordless Authentication with Passkey’s pdf

Tuesday September 17, 2024 09:20 - 10:20 CEST
Clubraum 1

Security, Password-less

Session format Breakout session (60 min)
Subjects Security, Azure AD, Sentinel, Zero Trust
Level Intermediate

10:40 CEST

Terraform Provider for Microsoft 365

Tuesday September 17, 2024 10:40 - 11:40 CEST

Clubraum 1

Terraform is widely recognized as the dominant language for professional cloud configuration. It has become an essential tool for Azure, AWS, and Kubernetes projects, offering numerous advantages such as a readable declaration language, reliable state tracking for changes, robust auditing of all modifications through git, and automatic documentation of infrastructure.

Until now, Terraform has primarily focused on configuring cloud infrastructures and provided limited support for Entra ID. However, we are introducing a groundbreaking development: the Terraform Provider for Microsoft 365. This session provides an overview of this provider, which in it's first incarnation enables the configuration of almost all aspects of Intune. With support for Autopilot, Conditional Access, Configuration Profiles with Settings Catalog, Compliance Policies, and more, it opens up entirely new possibilities for Enterprise or MSP Tenant Management through Terraform.

Speakers

Christian Kanja

CEO, glueckkanja AG

Christian Kanja has been working with glueckkanja for more than 30 years, focusing on the technical possibilities to create the best possible working environment for companies and their employees through innovation. As co-founder of the German-based company, he is responsible for... Read More →

Ugur Koc

Microsoft MVP, Cloud Engineer, glueckkanja AG

With a robust background in IT and cybersecurity, I have developed my expertise through various roles. My career began as an IT Support Specialist, where I built a strong technical foundation. Progressing into the realm of IT security, I grew from an Analyst to an Administrator, gaining... Read More →

Steffen Schwerdtfeger

Enterprise Mobility Management | Microsoft 365 | Education #100PercentCloud #EMM

Tuesday September 17, 2024 10:40 - 11:40 CEST
Clubraum 1

Sponsor

Session format Platinum Sponsor
Subjects Microsoft Intune, Security, Azure AD, Autopilot, Conditional Access, Automation, Windows Client OS, Windows 365, Compliance, Linux, Apple (iOS/macOS)
Level Advanced

14:00 CEST

Taking automated protection to the next level: Attack Disruption 2.0

Tuesday September 17, 2024 14:00 - 15:00 CEST

Clubraum 1

Automatic attack disruption, offered by Microsoft’s Unified Security and Operations Platform, provides out-of-the-box protection to its customers.

In this session, we will update you on the current status, recent advancements, and future plans in the area of threat intelligence and data-science based disruption.

The talk will also include a technical deep-dive into a real-life incident.
We will conclude by showing what you need to do to maximize the benefit of this powerful capability.

Speakers

Hadar Feldman

XDR GPM, Microsoft

Tuesday September 17, 2024 14:00 - 15:00 CEST
Clubraum 1

Security, Attack Disruption

Session format Breakout session (60 min)
Subjects Security, Automation, MicrosoftXDR
Level Intermediate
Area Microsoft

15:20 CEST

Kerberos is alive and kicking in the cloud

Tuesday September 17, 2024 15:20 - 16:20 CEST

Clubraum 1

Microsoft first introduced Kerberos as an authentication protocol in Windows 2000 Active Directory. Since then, many extensions to the protocol have been introduced to allow for constrained delegation, protocol translation and more. You may be surprised that Kerberos is still actively used in Microsoft Entra and solves several challenges, including SSO for hybrid users, hybrid user sign-ins using FIDO keys, Kerberos sign-in to Windows auth websites, and user authentication to cloud-hosted SMB file share.

Come to this session, and John Craddock will show you how Kerberos works and how Microsoft has implemented Kerberos in the cloud. This is packed with demos and insights that will allow you to troubleshoot your environments. Don't miss this session!

Speakers

John Craddock

Identity and security architect, XTSeminars Ltd

John has designed and implemented computing systems ranging from high-speed industrial controllers to distributed IT systems focusing on security and high availability. A key player in many IT projects for industry leaders, including Microsoft, the UK Government and multi-nationals... Read More →

Kerberos is alive and kicking in the cloud pdf

Tuesday September 17, 2024 15:20 - 16:20 CEST
Clubraum 1

Security, Identity

Session format Breakout session (60 min)
Subjects Security, Conditional Access, Zero Trust
Level Intermediate

16:40 CEST

Simplified Certificate Management with Microsoft Cloud PKI

Tuesday September 17, 2024 16:40 - 17:40 CEST

Clubraum 1

This session will introduce attendees to the new Microsoft Cloud PKI solution. Microsoft Cloud PKI is a cloud-based certificate services solution that significantly simplifies the deployment and management of client authentication certificates commonly used for Wi-Fi and VPN access. Cloud PKI eliminates the need for administrators to deploy complex on-premises infrastructure to support certificate authentication.

Speakers

Richard Hicks

President, Richard M. Hicks Consulting, Inc.

Richard Hicks is the founder and principal consultant at Richard M. Hicks Consulting, Inc. A Microsoft Most Valuable Professional (MVP) with more than 25 years of experience implementing secure remote access and public key infrastructure (PKI) solutions, he is a widely recognized... Read More →

Simplified Certificate Management with Microsoft Cloud PKI pptx

Tuesday September 17, 2024 16:40 - 17:40 CEST
Clubraum 1

Microsoft Intune, Cloud PKI

Session format Breakout session (60 min)
Subjects Endpoint Management, Microsoft Intune, Security, Compliance, Windows Client OS, Identity
Level Intermediate

17:45 CEST

Security AMA Session with Product Groups

Tuesday September 17, 2024 17:45 - 18:45 CEST

Clubraum 1

Join us for an interactive "Ask Me Anything" (AMA) session with leading cybersecurity experts. This unique opportunity allows attendees to engage directly with industry veterans and pioneers in cybersecurity. Whether you have questions about the latest cyber threats, strategies for building resilient security architectures, insights into threat intelligence, or any other security-related topics, our panel is here to provide valuable answers and insights. Bring your toughest questions and join a dynamic discussion designed to enhance your understanding and knowledge in the ever-evolving field of cybersecurity.

Speakers

Maayan Bar-Niv

General Manager, Defender for Cloud Apps, Microsoft

Sumit Malhotra

Group Product Manager, Microsoft

Leading teams on our vision and delivery of enterprise security focused solutions for our M365 customers. Driving rapid improvements in end users and security teams' resilience to emerging threats through automation in awareness, detection, investigation and response.

Martin Schvartzman

Principal Product Manager, Microsoft

Martin is a Principal Product Manager in the Microsoft Defender for Identity team. Has over 20 years of experience in the technology industry, primarily around IT and Cyber Security with vast knowledge of Cloud Services. Martin is passionate about technology and innovation, and he... Read More →

Lior Arviv

Senior Product Manager, Microsoft

Lior Arviv is a Senior Product Manager on the Defender for Cloud team, with over 15 years of experience in Microsoft technologies, particularly in cloud services and security. Passionate about innovation, Lior is dedicated to developing products that simplify complex challenges and... Read More →

Ran Marom

Group Product Manager, Microsoft

Ran is the group product manager for Microsoft Defender for Cloud Apps, previously to Microsoft Ran was leading security products in different domains such as cloud-native and network security

Girish Chander

General Manager, Microsoft

Paul Huijbregts

Principal Product Manager, Microsoft

Paul works at Microsoft as a Principal Product Manager for Defender for Endpoint. As a seasoned technologist and a subject matter expert in endpoint and cloud security, he is always open to gathering feedback for the product, sharing knowledge and helping others to be successful... Read More →

Hadar Feldman

XDR GPM, Microsoft

WP Ninja Summit Staff