How Phishing Resistant Credentials Work with Mark Morowczynski and Tarek Dawoud

Blueprint: Build the Best in Cyber Defense

内容由SANS Institute提供。所有播客内容（包括剧集、图形和播客描述）均由 SANS Institute 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

2M ago 54:03

MP3•单集首页

Click here to send us your ideas and feedback on Blueprint!

Mark Morowczynski returns for his 4th(!) time with his Microsoft coworker and identity and authentication expert Tarek Dawoud in this incredibly insightful conversation on the what, why, and how of phishing resistant credentials that YOU can implement right now!
This conversation covers:

What makes MFA phishable?
What phishing resistant credentials are and how they work
The history and modern methods for phishing resistant credentials
What attacks will be used once we move to phishing resistant credentials, and how to prevent and detect it
How verified digital identities and corporate identification can help further reduce risk of help desk based attacks
Shifting the culture to adopt a passwordless login
Key logs to detect identity attacks
Resources for learning KQL

Episode Links:

Tarek Explains Phishing Resistant Authentication: https://www.youtube.com/watch?v=3wtwUh6iyxY
Microsoft Digital Defense Report: https://www.microsoft.com/en-us/security/security-insider/intelligence-reports/microsoft-digital-defense-report-2024
Nuance: https://www.nuance.com/index.html
Book - The Definitive Guide to KQL: https://www.microsoftpressstore.com/store/definitive-guide-to-kql-using-kusto-query-language-9780138293383
KQL Github Repo: github.com/kqlmspress
Kusto Detective Agency: https://detective.kusto.io/

57集单集

#Tech #John Hubbard

How Phishing Resistant Credentials Work with Mark Morowczynski and Tarek Dawoud

Blueprint: Build the Best in Cyber Defense

50 subscribers

published 2M ago

MP3•单集首页

Click here to send us your ideas and feedback on Blueprint!

What makes MFA phishable?
What phishing resistant credentials are and how they work
The history and modern methods for phishing resistant credentials
What attacks will be used once we move to phishing resistant credentials, and how to prevent and detect it
How verified digital identities and corporate identification can help further reduce risk of help desk based attacks
Shifting the culture to adopt a passwordless login
Key logs to detect identity attacks
Resources for learning KQL

Episode Links:

Tarek Explains Phishing Resistant Authentication: https://www.youtube.com/watch?v=3wtwUh6iyxY
Microsoft Digital Defense Report: https://www.microsoft.com/en-us/security/security-insider/intelligence-reports/microsoft-digital-defense-report-2024
Nuance: https://www.nuance.com/index.html
Book - The Definitive Guide to KQL: https://www.microsoftpressstore.com/store/definitive-guide-to-kql-using-kusto-query-language-9780138293383
KQL Github Repo: github.com/kqlmspress
Kusto Detective Agency: https://detective.kusto.io/