Varonis Launches Entra ID Training Experience 'Breach at the Beach'

Overview of 'Breach at the Beach'

Varonis Threat Labs has unveiled a new training initiative called 'Breach at the Beach'. This interactive Capture The Flag (CTF) experience aims to develop cybersecurity skills specifically related to Entra ID and data exfiltration threats.

The game features Pixel, a threat-detecting cat, who helps players track a breach in Entra ID, guiding them as they uncover sensitive data targeted by threat actors.

The Importance of Entra ID

Entra ID serves as the control plane for enterprise identity management, linking users, applications, and permissions. Its evolving landscape, particularly with the rise of non-human identities like AI agents and automated workflows, has expanded the potential impact of compromises.

Mark Vaitsman from Varonis emphasized that a breach in Entra ID can allow threat actors to exploit non-human identities, leading to stealthy data exfiltration attempts. The training reflects real-world challenges faced by security professionals.

Real-World Application

The techniques presented in 'Breach at the Beach' are derived from actual cases Varonis researchers have encountered. By engaging with this training, participants can gain insights into the modern threats and defenses relevant in today's cybersecurity environment.

Doron Kapah highlighted that non-human identities are growing faster than human identities, significantly enlarging the attack surface and complicating monitoring and detection efforts.

Continuing Education Credits

Participants who successfully complete the challenges in 'Breach at the Beach' will be eligible to earn Continuing Professional Education (CPE) credits. This aspect not only enhances the experience but also encourages professional growth within the cybersecurity community.