top of page

Red Team Training Starts 24th October, 2026

Technical Talk

NOpal : Using Microsoft Project Opal features in Red Team Tradecraft

DATE

27 October 2026

LOCATION

Hilton EGL, Bangalore

TIME

9:15 - 10:15

Abstract

Microsoft defines Project Opal as an agentic capability in Copilot designed to perform task-based work on a user's behalf. Opal is designed to be an active assistant, with ability to use a Windows 365 Cloud PC to perform multi-step workflows on enterprise applications and data on behalf of a user.

​

This talk focuses on abusing these powerful Opal features in an Enterprise. Opal allows access only to identity, applications and data that the user identity can access. We will discuss how, even with that guardrail, Opal's features can be used to evade Microsoft security controls like MFA, Conditional Access, Network based restrictions and more.

​

The aim of this talk is to look at Opal and wonder: When it comes to AI and Agentic capabilities, is enterprise security an afterthought?

NOpal-Using Microsoft Project Opal features in Red Team Tradecraft.png

MEET THE INSTRUCTOR

Nikhil Mittal

Nikhil-Mittal.webp

Founder, Altered Security

Nikhil Mittal is a hacker, infosec researcher, speaker and enthusiast. His area of interest includes red teaming, Azure and Active Directory security, attack research, defense strategies and post exploitation research. He has 15+ years of experience in red teaming. He specializes in assessing security risks at secure environments that require novel attack vectors and "out of the box" approach. He has worked extensively on Azure Red Team, Active Directory attacks, defense and bypassing detection mechanisms.

​

Nikhil has trained more than 15000 security professionals in private trainings and at the world’s top information security conferences. ​He has spoken/trained at conferences like DEF CON, BlackHat, BruCON and more.​

About AltSecCON

AltSecCON is an in-person Red Team training initiative focused on instructor-led delivery, enterprise-aligned labs, and practical offensive security execution.
 

​© AltSecCON. An Altered Security initiative.
contact@alteredsecurity.com

Information

Training Programs

Follow Us

  • X
  • LinkedIn
  • Discord
  • Facebook
  • Instagram

Conference

Event

© 2026 AltSecCON. All rights reserved.

bottom of page