The Domain is Not a Trust Boundary – Tenant Edition | SO-CON 2025
Source: YouTube · SpecterOps · published May 6, 2025 · 37:56
BLUF: The speaker presents initial findings on cross-domain compromises within Microsoft Entra, framing them as a successor to previous research on forest trust compromises [27].
Key Takeaways:
• The talk serves as a direct follow-up to Jonas's previous session, which detailed various cross-domain compromise methods within Active Directory forests [12].
• The core focus shifts from traditional forests to the Entra ecosystem, exploring similar attack vectors in this cloud-identity context [30].
• Speaker Daniel (HotNUS) from Spectrops introduces his recent months of research into this specific Entra subcategory to share early insights [39].
Closing statement: This presentation aims to inspire further research into Entra security by revealing initial discoveries regarding identity compromise paths.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[Music] Um, I don't know if this is intentional or not. Uh, but I I feel like this talk is a perfect uh successor to the previous talk. I don't know how many people were here uh before lunch with Jonas's talk. Um, but Jonas essentially went through all the different ways that you can have kind of crossdain compromises within a forest. And this is kind of a very similar idea just with Entra, right? So, my name is Daniel. Um, I go by HotNUS on socials. Uh, I've been with Spectrops for about five years. And I've been researching this kind of I don't know this subcategory of Entra uh for a few months now. And so what I'm going to be sharing is just some of that some of the initial findings from that research and uh and hopefully inspire you to to maybe um do some of this research along with me…