Seminar – Auditing Microsoft Entra ID with PowerShell®

As organizations continue to move their data and applications to the cloud, auditors need skills to audit cloud environments. Though environments may be FedRAMP authorized and/or subject to external assessments, organizations will have responsibilities for certain activities, such as account management, privileged access, and some configuration settings. Thus, auditors will need to access cloud data to audit these environments.

Microsoft Entra ID, formerly Azure Active Directory, is Microsoft’s cloud service that provides identity and access management services to Microsoft’s cloud environments. Like Active Directory, Entra ID allows organizations to establish user, device, and group accounts. Azure can also sync with an on-premises Active Directory. While Entra ID provides web interfaces, auditors often need information that is not easily or efficiently retrieved from these interfaces.  

This two-day course will cover the Microsoft Graph and PowerShell commands needed to obtain data from Entra ID. The course will also cover basic audit tests that can be performed using PowerShell on Entra ID data. Attendees will be provided access to a virtual server to practice commands and perform hands-on exercises.  Auditors and security professionals who audit Entra ID will benefit from attending this course.

Registration closes on May 15, 2024 @ 5pm.

Register Today!

 

Agenda

 

Additional Course Details

Hands-on Lab Exercises

Each student will be provided access to a Windows Server to use during the course. The server will be hosted on the Azure Lab Services platform.

The server will be accessed using Windows Remote Desktop. Therefore, on the course dates, students will need to use a Windows-based computer that permits use of the Remote Desktop protocol.

An email will be sent to each student this evening with instructions on accessing the virtual server. Students are encouraged to register and follow the instructions to access the virtual server prior to the start of the seminar.

Each lesson in the course has an accompanying PowerShell script that will be used for that lesson and will be pre-loaded onto each student’s virtual server.

 

PowerShell and Microsoft Graph commands

Students will practice obtaining data from an Entra ID instance using Microsoft Graph commands. Students will then use basic PowerShell commands to arrange, add to, and extract information into a CSV file that can be used in audit workpapers or other analysis.

 

Materials Provided During the Seminar

Each student attending the seminar will be provided:

• Presentation materials
• PowerShell scripts for each lesson
• Access to the virtual server for up to 5 hours after the course ends for additional practice
• Link to the seminar recording, good for 30 days after the seminar

 

Instructor

 

Virtual Meeting Information

• This event will be presented through Zoom.  The instructor will send an email with the zoom link prior to the event.
• Prior to the event, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.
• Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits.
• The ISACA Greater Washington, D.C. Chapter will not be responsible for the participant’s inability to respond to the polls.

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 14 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

Learning Objective

After completing this course, students will have basic skills to use PowerShell to obtain, view, and export data from Microsoft Entra ID. 

 

CPE-Related Details

• Prerequisites: Students should be familiar with using PowerShell and working with Microsoft Entra ID.  This course builds on the concepts presented in the Seminar – Introduction to Auditing with PowerShell®.
• Advance Preparation: The instructor will provide materials during the Zoom.
• Program Knowledge Level: Intermediate
• Delivery Method:  Group Internet Based
• Field of Study:  Information Technology – Technical