SANS Cloud Security reposted this
Two weeks ago I was in Las Vegas to teach my first ever SANS class! It was a new course, SEC559: Identity Security for Cloud and Hybrid, which Maxim Deweerdt created with help from me and Christos Gourzoulidis. I have always enjoyed helping people learn new concepts. From being a TA at Penn State talking about network security, to an instructor at National Intelligence University talking about everything cyber, and now with SANS focused on identity security. It is a great feeling to see the light bulb go off (or just a head nodding). Our class was full of great students, including Richard Nelson who was an intern at CISA when I was there, but is now a SEC559 capstone champ. I still remember drawing on the wall in the office to explain how our NIDS/netflow logs were structured and generated. Now they all understand OAuth tokens, SAML, Entra device objects, guest users, authorization policies, Entra sign-in log structures, managed identities, access packages, and of course Kerberos (but not too much Kerberos). 🤓 I was also happy that people enjoyed the KQL queries and capstone exercise on Day 5. One student even asked for more KQL! If you're interested in taking the course, the next session is in Dallas, TX (December 7-11): https://lnkd.in/gCwXSTgG