Microsoft Cloud and M365 Security Fundamentals

Focused View

Christian Biehler

2:28:00

10 View

1 - Introduction

1 - Introduction.mp4

02:21

2 - Microsoft Cloud components and responsibilities for security.mp4

03:37

2 - Identities and their risks

1 - Understanding Identities.html

2 - Why so critical.html

3 - Understanding Security principals and Identities.mp4

04:51

4 - Understanding attacks against identities.mp4

07:46

5 - Understanding Critical roles.mp4

09:32

6 - Guests and Azure B2B collaboration as security risk.mp4

14:23

6 - Scriptlets for Azure M365 to get all roles and their permissions.txt

3 - Azure Tenant and Entra ID Insecure defaults

3 - Security Defaults What do you know.html

7 - Securing Tenantrelated insecure defaults.mp4

05:50

8 - Securing Userrelated insecure defaults.mp4

11:25

9 - Securing Guestrelated insecure defaults.mp4

07:32

10 - Securing Groupsrelated insecure defaults.mp4

06:18

11 - Securing Devicerelated insecure defaults.mp4

06:57

12 - Securing Applicationrelated insecure defaults.mp4

12:02

4 - Further security considerations

13 - Blog post from Daniel Chronlund about deploying CA policy POC.txt

13 - Conditional access policies.mp4

19:34

13 - WhatTheAzureCA Automated WhatIf evaluation tool for Conditional Access.txt

14 - Audit Activity Reference.txt

14 - Logging Monitoring Alerting.mp4

25:49

15 - Microsoft Secure Score and other selfassessment tools.mp4

06:38

5 - The end

16 - Checklist about M365 Entra security configuration basics.txt

16 - The end Summary and checklist.mp4

03:25

Description

The beginner guide to secure Azure Active Directory and the Microsoft 365 environment against common attacks!

What You'll Learn?

Learn the security basics about Microsoft Azure and Microsoft 365 cloud Tenants.
Secure your Micorosoft Entra / Azure AD and Microsoft Tenant against common attacks with focus on identities.
Understand attacks against M365 and Azure Tenants and identities.
Understand and adapt the insecure Microsoft default settings when starting with an Entra ID.
Learn how identities are used and protected Teams, SharePoint and OneDrive.
Securely manage Azure B2B and guest invitation settings.

Who is this for?

Administrators who start using the Microsoft Cloud services.

IT leaders who want to understand the M365 security basics.

IT providers that want to learn how to secure their customers M365 Tenant.

Security consultants who are new to M365 or Microsoft Azure.

Security analysts who want to understand Entra ID / Azure AD security fundamentals.

What You Need to Know?

No special requirements needed.

An MS Azure Tenant is helpful but not mandatory to go through the settings while learning.

More details

Description
In this course you will learn how security in the Microsoft Cloud services basically works and what you need to do to protect your Azure /Â M365 tenant against common attacks and insecure Microsoft default configurations.
Cloud services are reachable from everywhere around the world, which shifts the security from firewalls and VPNs toÂ identities - identities are the new firewall.
Azure ADÂ is the Microsoft cloud identity service for authentication and autorization and thus keeps all your users, groups and additional attributes.
You will learn what kind of identities exist in the Azure world and how you can protect them.
When starting a new tenant, Microsoft provides some default settings - most of them do not have security as the first priority.
Ask yourself, if you want that ..
.. every user can register Enterprise Applications?
.. every user can create new (Sub-) tenants?
.. every user can create subscriptions in your tenant?
.. every user can use the Azure admin portals?
.. guest with non-Azure accounts can be invited?
.. Teams and M365 groups can be created by every user?
.. security groups can be created by every user?
.. passwords can be weak?
After dealing with those basics, the course will give an introduction as well as recommendations for security considerations of:
Multifaktor-Authentication including authentication strength
Conditional Access policies
Device Compliance using Intune
Dangerous Azure ADÂ roles
Logging and Alerting
Security Score and more guides to improve the tenant security
The course switches between theoretical introductions based on slides and practical configuration sessions using the current state of the Azure configuration portals in 2023.Â
Who this course is for:
Administrators who start using the Microsoft Cloud services.
IT leaders who want to understand the M365 security basics.
IT providers that want to learn how to secure their customers M365 Tenant.
Security consultants who are new to M365 or Microsoft Azure.
Security analysts who want to understand Entra ID / Azure AD security fundamentals.

User Reviews

Rating

average 0

Total votes0

Focused display

Christian Biehler has been working as a penetration tester and consultant for IT and information security since 2012. After successfully completing a master's degree in IT security in Bochum (Germany), he has gained experience in many projects in large and small companies. The focus was always on the security of systems, services and applications. Since 2015, he has been advising customers on Microsoft Windows and has been giving training sessions throughout the years on security issues related to Microsoft 365 and Windows 10/11. As a speaker and trainer, he speaks at various events and reports on his daily experiences from his projects.

Udemy

View courses Udemy

Students take courses primarily to improve job-related skills.Some courses generate credit toward technical certification. Udemy has made a special effort to attract corporate trainers seeking to create coursework for employees of their company.