Cloud Security
Identity Attack and Defense Workshop
Deep dives on phishing-resistant MFA patterns, conditional access stories, and token theft mitigations in modern directories.
- 4 weeks
- Accelerated evenings
- Tuition from KRW 1,520,000
Program narrative
Identity remains the spine of most breaches; this workshop bootcamp spends time on realistic adversary paths without glamorizing them. You will configure lab tenants, break them on purpose, then rebuild with defensive defaults. Discussions include enterprise client expectations for auditability and how activity logs should look under scrutiny. We highlight operational friction honestly: some mitigations slow users, and you will practice explaining tradeoffs with data.
What you practice
- Conditional access simulation grids
- Token replay exercises with instructor-supervised resets
- Phishing-resistant MFA adoption roadmaps
- Office hour blocks for resume review with identity projects
- Partner lab with SOC Analyst Signal School cohorts
- Short writing prompts on incident records for identity cases
Artifacts you can show
- Implement a phishing-resistant MFA rollout plan draft
- Complete two token theft mitigation labs with write-ups
- Deliver a leadership briefing on residual identity risk
FAQ
Labs skew Microsoft-heavy, but concepts apply to other IdPs with instructor mapping notes.