Modern Management Summit 2025

Last year we were faced with a new advanced phishing technique, called Adversary-in-The-Middle (AiTM). This is an advanced method to bypass multiple forms of MFA, where a proxy is used to capture tokens also known as a man in the middle attack. In this session Kenneth and Erik explains using a real field story about how this type of attack works.

Then we cover the topics about Protect - Detect - Respond

Protect
We will go through our options to fight this by using differente strategies like implementing phishing resistant MFA methods and by using Conditional Access policies, with or without advanced Entra ID P2 Protection methods.

Detect
Which options you have for detecting this kind of attack, when you are unable to automatically protect against this attack.

Respond
What can we do after we have detected that the attack took place, some useful tips on how to mitigate the issue. 

As a bonus we unveil also $0 options to protect and detect for SMB and MSP, since we are Dutch :)

After this session you will have enough information to stop this attack and some food for thought to make a more sophisticated layering of defense strategies.

Device Code Phishing is more common than you´d think. Simply because it works better than asking for a username and password.

This session will show you common attack scenarios targeting both regular users and admins (god forbid) with device code phishing, and of course what we can implement to prevent it from occurring. We will also look at enumeration from an external/guest point of view to identify an appropriate target to phish.

Data protection technologies is rarely something that is appreciated by users. However, with the current state of App Protection policies, in Microsoft Intune, we have a better opportunity than ever before. This session will dive into APP with focus on iOS and Android and show how to implement them for both managed and unmanaged devices. You will also gain valuable insights based on field experiences on how to successfully convince your users that data protection is the coolest thing ever.

Manage Intune from anywhere? Today we can secure the identity with conditional access, FIDO2 and MFA. But what about the actual device the administration is done from?

Learn how to setup a privileged access workstation using Intune and Windows 365.
During this session we are going through how to make sure that You have a secure way for high privileged administrators to do the work.