BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Better Security//The Watch//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Chasing Ghosts After the Sign-In: Finding and Removing an Attacker’s Way Back
X-WR-TIMEZONE:America/Los_Angeles
BEGIN:VEVENT
UID:event-1187@bettersecurity.ai
DTSTAMP:20261027T230829Z
DTSTART:20261118T140000Z
DTEND:20261118T150000Z
SUMMARY:Chasing Ghosts After the Sign-In: Finding and Removing an Attacke
 r’s Way Back
DESCRIPTION:Learn to investigate identity compromise in Microsoft Entra\,
  uncover persistent access\, and verify that cleanup has closed the atta
 cker’s paths back in.\n\nRegister: https://www.sans.org/webcasts/chasing
 -ghosts-after-sign-in-finding-removing-attackers-way-back\n\nDetails: ht
 tps://bettersecurity.ai/virtual/events/chasing-ghosts-after-the-sign-in-
 finding-and-removing-an-attackers-way-back-2026-11-18
LOCATION:Online
URL:https://bettersecurity.ai/virtual/events/chasing-ghosts-after-the-sig
 n-in-finding-and-removing-an-attackers-way-back-2026-11-18
END:VEVENT
END:VCALENDAR