Unmasking Entra ID Threats: A CrowdStrike Researcher's Early Career Insights with Sapir Federovsky

In this episode we chat with Sapir Federovsky, a Security Researcher at CrowdStrike, who shares her journey from military service to becoming an identity threat researcher.

She discusses her learning methods, the importance of community, and the challenges of keeping up in the fast-paced world of Azure and Entra ID security.

Sapir also delves into specific Entra ID features she focuses on, the critical role of prevention alongside detection, and her experiences as a woman in the tech industry.

LinkedIn - https://www.linkedin.com/in/sapir-federovsky-a687491b0/

Watch on YouTube

PS. Can I ask a favor? If you enjoyed this episode please leave a review and rating! Thank you 🙏 - Merill

🔗 Related Links

* Sapir's blog - https://sapirxfed.com/

* Reportly - https://github.com/sap8899/reportly

📗 Chapters

00:00 Intro

01:17 Early Career Perspectives & Learning Journey

03:25 Transitioning from Military to Civilian Tech

04:25 Learning Cloud Security & The Power of Talks/Blogs

08:19 Building a Tool for Log Analysis

12:26 A Typical Day: Continuous Learning & Community Sharing

15:08 Balancing Learning Old & New in a Fast-Evolving Field

17:38 The Power of Teaching to Master a Topic

19:37 Learning by Answering Questions

21:17 Vision: Becoming the Ultimate Defender & Community Building

23:48 Deep Dive: Graph Activity Logs in Entra ID

27:33 Focusing on Hybrid Environments & Synchronization

29:37 Experiences as a Woman in Tech

36:29 The Shift from Detection to Prevention & Hardening

39:13 The Challenge of Updating Tenant Configurations

45:57 Navigating Organizational Change Management Cycles

50:29 Final Advice: Always Say Yes & Create Opportunities

Podcast Apps

🎙️ Entra.Chat - https://entra.chat

🎧 Apple Podcast → https://entra.chat/apple

📺 YouTube → https://entra.chat/youtube

📺 Spotify → https://entra.chat/spotify

🎧 Overcast → https://entra.chat/overcast

🎧 Pocketcast → https://entra.chat/pocketcast

🎧 Others → https://entra.chat/rss

Merill's socials

📺 YouTube → youtube.com/@merillx

👔 LinkedIn → linkedin.com/in/merill

🐤 Twitter → twitter.com/merill

🕺 TikTok → tiktok.com/@merillf

🦋 Bluesky → bsky.app/profile/merill.net

🐘 Mastodon → infosec.exchange/@merill

🧵 Threads → threads.net/@merillf

🤖 GitHub → github.com/merill