TTPs of Azure Threat Actors : From Credential Reset to Data Exfiltration

Think Like an APT : Attacking Azure and Entra ID Like Real Adversaries

DATE

27 October 2026

LOCATION

Hilton EGL, Bangalore

TIME

10:45 – 14:15 (w/Lunch)

Abstract

Modern APT campaigns aren't hacking in, they're logging in. Identities get compromised, trust relationships get abused and attackers move from a single hijacked account to the heart of an organization's production infrastructure, often without touching a single piece of malware.

This workshop is built on real intrusion and real damage. It starts small, as most breaches do, but we don't stop there: we emulate certain TTPs of the APT group, pivoting and pushing until we get what we want. Step into the attacker's shoes and understand how modern identity-centric compromises unfold.

Prerequisites for the webinar

A laptop that can access the internet over wireless networks

Basic understanding of Azure and Entra ID (not mandatory)

Register for Workshop

MEET THE INSTRUCTOR

Prajwal Kumar Pandey

Azure Security Researcher Altered Security

Prajwal is a Security Researcher at Altered Security with experience securing Azure, AWS and SaaS environments. His work spans threat detection, incident response, and cloud red teaming. He has worked across both the offensive and defensive sides of cloud security from simulating attacks and validating detection rules to incident response. Prajwal has a deep interest in hunting misconfigurations across modern cloud environments, with a particular focus on attack paths that emerge from CI/CD pipelines, identity trust relationships, and cross-tenant access patterns. His goal is to help enterprises understand these risks and build a stronger cloud security posture.

About AltSecCON

AltSecCON is an in-person Red Team training initiative focused on instructor-led delivery, enterprise-aligned labs, and practical offensive security execution.

Information

Training Programs

Conference

Tickets

Event Schedule

Certification & Outcomes

Event