Virtual Event

Chasing Ghosts After the Sign-In: Finding and Removing an Attacker’s Way Back

1 CPEFreeVirtualThreat intel
When
Wednesday, November 18, 2026
6 to 7 AM Pacific
Where
Online
Cost
Free
CPE
Organizer reports 1 hours (other)
Who it's for
Practitioners
Platform
SANS
Speakers
Maxim Deweerdt
Email me a reminder the day before

A reminder is not registration. Register with the organizer to hold your spot. One email, the morning before. We never share your address.

Learn to investigate identity compromise in Microsoft Entra, uncover persistent access, and verify that cleanup has closed the attacker’s paths back in.

Details from the organizer's page. Times and prices can change; the organizer's page is authoritative. Report a correction.

Never miss the next one.

The Sunday email picks the week's best online sessions with CPE, alongside every security event in your city.