Identity under attack: How adversaries exploit identity across the attack lifecycle

Learn how attackers compromise organisations by exploiting identity – and discover the tools and practices that strengthen your identity defence. Identity is now the fastest‑growing attack vector in modern cloud and hybrid environments. As identities span Entra ID, Active Directory, SaaS, multi‑cloud platforms, and AI agents, gaps in configuration, privilege management, and lifecycle governance create invisible pathways that attackers readily exploit. In this session, we’ll break down how adversaries target identity at every stage of an attack – from initial access to lateral movement and payload delivery. You’ll see how Microsoft’s identity security stack (Entra, Defender for Cloud Apps, Defender for Identity, Sentinel) provides the visibility and detection capabilities needed to stay ahead of identity‑driven breaches.