Advanced Active Directory to Entra ID lateral movement techniques

The talk asks whether a hybrid environment still has a security boundary between Active Directory and Entra ID. Hardening has reduced how far the cloud trusts on-premises data, because threat actors have used known lateral-movement paths into the cloud. It walks through Entra ID and hybrid trust internals and several lateral-movement techniques that start from on-premises AD, including paths that bypass authentication and MFA. The speakers page describes them as design behavior rather than vulnerabilities, with some later hardening from Microsoft and little useful logging.