BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//orangecon-2024//talk//PGAYXE
BEGIN:VTIMEZONE
TZID:Europe/Amsterdam
BEGIN:DAYLIGHT
DTSTART:20230906T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20231029T030000
RDATE:20241027T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20240331T030000
RDATE:20250330T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Graph API Mastery - Logs to Real World Attacks - Shiva P\, Parthib
 an R
DTSTART;TZID=Europe/Amsterdam:20240905T150000
DTEND;TZID=Europe/Amsterdam:20240905T152000
DTSTAMP:20260819T152020Z
UID:pretalx-orangecon-2024-PGAYXE@pretalx.com
DESCRIPTION:In this presentation\, we will explore the potential of Micros
 oft Graph API logs\, focusing on its use for enhancing security\, insights
 \, and real-world attack scenarios within M365 environments. We begin by d
 etailing the process of obtaining logs. We'll talk about fields which are 
 critical for monitoring and analysis\, correlatable fields and useful KQL 
 functions that help. A comparison of delegated vs. application permissions
  to help attendees understand their distinct attack use cases and best pra
 ctices. \n\nThe discussion will move to common attack patterns using Graph
  API\, offering strategies for threat hunting and detection. Real-world st
 ories from the frontlines will illustrate how organizations have successfu
 lly utilized Graph API to mitigate security incidents. Additionally\, we w
 ill also highlight significant contributions from researchers and authors 
 who've done great research in this field. The presentation will conclude w
 ith a summary of best practices and actionable insights for leveraging Mic
 rosoft Graph API logs to its fullest potential. This session aims to equip
  security professionals with the knowledge to effectively use Microsoft Gr
 aph API logs.
LOCATION:Second track
URL:https://pretalx.com/orangecon-2024/talk/PGAYXE/
END:VEVENT
END:VCALENDAR