Defending M365 & Azure with Kevin Klingbile

This class is designed to be an introduction to M365 and Azure security strategies.

Course Length: 16 Hours

Includes a Certificate of Completion

Enroll Now

Next scheduled date: WWHF Deadwood 2026 - Link at bottom.

Description

This class is designed to be an introduction to M365 and Azure security strategies.

In today’s digital landscape, organizations commonly rely on Azure and Microsoft 365 for critical operations. However, with the increased adoption of these platforms comes a heightened need for robust defense strategies to protect against evolving threats and safeguard sensitive data.

This course will equip IT professionals with the knowledge and skills needed to defend Azure and Microsoft 365 environments effectively. We will cover cloud security measures and common misconfigurations. In addition, Red Teamers will learn to identify common attack surfaces within their client’s environments.

Student Requirements
- Credit Card to sign up for M365 and Azure services
- While it is possible to follow the lecture during class without a subscription, a subscription is required to work with the labs and get hands-on experience in M365 and Azure.
- Validate Microsoft M365 and Azure services are available in your country
Computer Specs
- Full Administrator
- Stable Internet Access
- The class requires a Windows 10/11 host (Virtual or Physical) with Administrator access to PowerShell for executing queries against M365 and Azure
- Windows System Requirements: x86 architecture CPU clocked at 2 GHz or higher and a computer with at least 8 GB of RAM. 16 GB is recommended

Syllabus

- Cloud Basics

- Recon (Unauthenticated & Authenticated)

M365

- Entra ID/IaM (Users, Groups, Applications, PIM, Identity Protection, Conditional Access, MFA, SSPR, Etc.)

- InTune

- Exchange

- Microsoft Graph API

- Office Forms

- SharePoint

- Teams

Azure

- Subscriptions

- Key Vault

- Azure Firewall

- Application Gateway

- Azure Management and Orchestration

- Azure DevOps

- Governance & Compliance

- Azure Cloud Shell

- Compute

- Networking

- Storage Accounts

- Applications

- Azure DevOps

FAQ

Prerequisites

This class is an introduction to M365 and Azure security strategies. However, an understanding of security and cloud concepts is beneficial. A basic working knowledge of PowerShell is helpful but not necessary.

Who should take this course

Who should take this class

Cloud defenders / blue teamers

Red teamers or pentesters who want to understand common cloud attack surfaces and how defenders mitigate them

IT admins and security engineers responsible for securing M365/Azure

Anyone interested in cloud security strategies and misconfiguration risk such as managers or auditors

Audience skill level:

Intermediate

Students should have an introductory understanding of cloud security and intermediate-level knowledge of security concepts.

Key takeaways

Understanding the difference between M365 and Azure
Understanding Microsoft default cloud settings and analyzing what should be changed and why
Gaining familiarity with M365 security components such as Entra ID (Users, groups,
Learning Azure components and associated security concepts, including subscriptions, networking, compute, key vaults, firewalls, application gateways, governance, and compliance

About the Instructor

Kevin Klingbile

Bio

Kevin Klingbile has been working for Black Hills Information Security (BHIS) as a Security Analyst since 2020. Previously, Kevin spent most of his career performing both red and blue team roles in the energy utilities sector. Kevin is a contributor to the IT security community as an advisor on the CIS top security controls panel and ICS guide. He also teaches security courses as an adjunct professor.

Register for Upcoming

Wild West Hackin' Fest Deadwood 2026

Live Training Kevin Klingbile

Defending M365 & Azure is being taught at Wild West Hackin’ Fest – Deadwood 2026.

For more information about our conferences, visit Wild West Hackin’ Fest!