BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Sold Out - Entra ID Persistence - Because Passwords 
 Were Never\n   the Problem\n   Tags: DEF CON Workshop | DEF CON Workshops\
 n   When: Saturday\, Aug 8\, 14:00 - 17:59 PDT\n   Where: LVCCW Level 2 W2
 28 (Workshops) - [1]Map\n\n   Description:\n\n   Modern enterprise securit
 y has shifted from network boundaries to\n   identity\, making Microsoft E
 ntra ID a critical control plane and a\n   prime target for persistence. W
 hile credential theft remains common\,\n   sophisticated attackers increas
 ingly establish long-term access\n   through identity-layer backdoors that
  survive password resets and\n   evade traditional monitoring.\n\n   We wi
 ll explore how attackers achieve durable persistence in Microsoft\n   Entr
 a ID by abusing service principals\, federated identities\,\n   passwordle
 ss authentication methods\, and device trust relationships.\n   The sessio
 n highlights techniques that remain effective even after\n   common remedi
 ation actions like credential rotation and MFA\n   enforcement. Through gu
 ided\, hands-on scenarios\, participants will\n   simulate these identity-
 layer persistence techniques and understand\n   their real-world impact de
 monstrating how adversaries integrate into\n   legitimate identity workflo
 ws to maintain covert\, long-term access\n   without raising immediate sus
 picion.\n\n   Participants will step into the role of an adversary and exp
 lore how\n   persistence is established and maintained inside Microsoft En
 tra ID.\n   Rather than focusing on theory\, this workshop breaks down rea
 l-world\n   attack paths used to retain access beyond initial compromise\n
    highlighting techniques that survive password resets\, MFA enforcemen\n
 \n   Speakers:Raunak "Trouble1" Parmar\,Chirag "3xpl01tc0d3r" Savla\n\n   
 SpeakerBio:  Raunak "Trouble1" Parmar\n\n   Raunak Parmar works as a senio
 r cloud security engineer at White\n   Knight Labs with 6+ years of experi
 ence. His areas of interest include\n   web penetration testing\, Azure/AW
 S security\, source code review\,\n   scripting\, and development. He enjo
 ys researching new attack\n   methodologies and creating open-source tools
  that can be used during\n   cloud red team activities. He has worked exte
 nsively on Azure and AWS\n   and is the author of Vajra\, AzDevRecon and M
 sCodePhish. He has spoken\n   at multiple respected security conferences l
 ike Black Hat\, Defcon\,\n   Nullcon\, RootCon\, HackspaceCon\, NorthSec\,
  LeHack \, etc and also at\n   local meetups.\n\n   SpeakerBio:  Chirag "3
 xpl01tc0d3r" Savla\n\n   Chirag Savla is a Cyber Security professional wit
 h 10+ years of\n   experience. His areas of interest include penetration t
 esting\, red\n   teaming\, azure and active directory security\, and post-
 exploitation\n   research. He prefers to create open-source tools and expl
 ore new\n   attack methodologies in his leisure. He has worked extensively
  on\n   Azure\, Active Directory attacks\, defense\, and bypassing detecti
 on\n   mechanisms. He is an author of multiple Open Source tools such as\n
    Process Injection\, Callidus\, etc. He has presented at multiple\n   co
 nferences and local meetups and has trained people in international\n   co
 nferences like Blackhat\, BSides Milano\, Wild West Hackin’\n   Fest
 .\n\n   Links:\n       Registration (July 14\, 2026\, Noon US Pacific) - [
 2]https://events.humanitix.com/sat_pm_ws3_4074\n   '\n\n   1. #LVCCW_Level
 2_North\n   2. https://events.humanitix.com/sat_pm_ws3_4074\n\n\n
DTEND:20260809T005900Z
DTSTART:20260808T210000Z
LOCATION:DEF CON Workshops - LVCCW Level 2 W228 (Workshops)
SUMMARY:Sold Out - Entra ID Persistence - Because Passwords Were Never the 
 Problem
END:VEVENT
END:VCALENDAR