During this 5-day course in 35 hours of super intensive training you will gain crucial cybersecurity knowledge and skills in terms of Incident Response in the Cloud. Moreover, you will be able to:
(9:00am – 4:00pm CEST/CET Monday to Thursday)
Original price was: €3850.€3300Current price is: €3300. (TAX incl.*)
This immersive five-day training delivers a complete, hands-on journey through Azure security, identity abuse, threat detection, and cloud incident response. Students begin by establishing core foundations – Azure architecture, governance, logging, and the security stack, before progressing into the full Azure Cyber Kill Chain. Participants will perform real-world attacks across identity, compute, storage, and control-plane layers, including token theft, AiTM phishing, privilege escalation, service principal compromise, misconfigurations, and persistence techniques unique to Azure.
This immersive five-day training delivers a complete, hands-on journey through Azure security, identity abuse, threat detection, and cloud incident response. Students begin by establishing core foundations – Azure architecture, governance, logging, and the security stack, before progressing into the full Azure Cyber Kill Chain. Participants will perform real-world attacks across identity, compute, storage, and control-plane layers, including token theft, AiTM phishing, privilege escalation, service principal compromise, misconfigurations, and persistence techniques unique to Azure.
We offer you pricing plan designed and adjusted to your specific needs and budget. Buy now or book your spot and pay later.
Building on the offensive concepts, attendees learn advanced threat-hunting using KQL and Microsoft Graph, developing custom detections and analytic rules in Sentinel. The course concludes with a complete, cloud-focused incident response framework aligned to NIST, covering investigation, evidence acquisition, containment, remediation, and strategic hardening.
This technical course is intended for security architects, Entra ID administrators, security administrators, and security auditors.
During the course you will be provided with a bunch of materials such as lab exercises, presentations, intriguing articles and useful tools to make your tasks a little bit easier!
Exercises are based on Entra ID, Microsoft 365, Windows 11, and Windows Server 2022. Remember that the hybrid identity lab environment will stay online for an extra three weeks so you may practice even more after the training is completed! This workshop is based on practical knowledge from tons of successful projects, many years of real-world experience and no mercy for misconfigurations or insecure solutions!
You will be granted access to our closed Discord community server where you will be able to share your thoughts with other IT specialists.
After finishing the course, you will be granted a CQURE Certificate of Completion. Please note that after completing the course you will also be eligible for CPE points!
This Live Virtual Class consists of 15 Modules in terms of Incident Response in the Cloud. They include essential theory combined with individual practice during the exercises as well as loads of hands-on tools and real-case scenarios.
a) Shared responsibility model & Azure security layers
b) Azure Terminology & Hierarchy (Tenants, Subs, MGMT Groups)
c) Azure Resource Manager (ARM) & control-plane concepts
d) Azure Compute, Network, and Storage components
e) Azure Security components (Defender for Cloud, Sentinel)
Threat modeling for Azure services
Enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security.
To attend this training, you should have a good hands-on experience in administering Windows infrastructure. At least 5 years in the field is recommended. All attendees should have experience with Active Directory Domain Services (AD DS) administration.
The course is perfect for security architects, Entra ID administrators, security administrators, and security auditors.
To participate in the course you need a stable internet connection. For best learning experience we also need you to have a webcam, headphones and a microphone. Open RDP port 3391 for the connection to the Lab environment is needed as well. We will setup a secure Zoom classroom for every day of the course – we will send you a safe link to join the conference by e-mail.
Exercises are based on Entra ID, Microsoft 365, Windows, and Windows Server. Remember that the hybrid identity lab environment will stay online for an extra three weeks so you may practice even more after the training is completed!
I have attended CQURE’s training as someone who is not a security professional, but just an enthusiast, and I feel like I learned a A LOT. The whole training was loaded with information and nice demos of the latest technologies. On top of that — having an opportunity to ask and talk to professionals was priceless.
“Totally professional, total great stuff, in-depth knowledge and a perfect Learning Atmosphere! I like it! Thanks so much for sharing your experience and knowledge!”
“All of their classes are based on their real world experience with the products, not just the typical Official Curriculum style classes that teach you things for an exam, but that you will never use. You’ll find that all of the material you’ll learn in the class will be used, at some point, in your security career.”
“lsass and Kerberos part blew my mind. This information is very relative to our work. Course was spot on what we currently need”
“The instructor, course content and lab exercises were very good. What impacted my satisfaction with the course the most was the knowledge of Paula. I would recommend this course to anyone whose job fits to this topic.”
“The depth of the topics combined with the good exercises and additional information was simply outstanding.”
I have attended CQURE’s training as someone who is not a security professional, but just an enthusiast, and I feel like I learned a A LOT. The whole training was loaded with information and nice demos of the latest technologies. On top of that — having an opportunity to ask and talk to professionals was priceless.
“Totally professional, total great stuff, in-depth knowledge and a perfect Learning Atmosphere! I like it! Thanks so much for sharing your experience and knowledge!”
“All of their classes are based on their real world experience with the products, not just the typical Official Curriculum style classes that teach you things for an exam, but that you will never use. You’ll find that all of the material you’ll learn in the class will be used, at some point, in your security career.”
“lsass and Kerberos part blew my mind. This information is very relative to our work. Course was spot on what we currently need”
“The instructor, course content and lab exercises were very good. What impacted my satisfaction with the course the most was the knowledge of Paula. I would recommend this course to anyone whose job fits to this topic.”
“The depth of the topics combined with the good exercises and additional information was simply outstanding.”
Investing in knowledge is one of the most worthy investment not only for us, but also for our environment. Learning new skills and insights in terms of cybersecurity may benefit with gaining awareness and as a result, may prevent falling a victim to cyber threats in the future.
You will be the valuable element in regards to company’s safety – knowing about potential threats and ways of avoiding them may be incredibly useful in a daily company life.
Not only your company will gain a specialist in terms of cybersecurity, but also you will unlock the door for expanding your skills horizon even further.
Completed course with personal certification may be the perfect advantage when it comes to business.
Knowledge is power—it helps navigate through complex regulatory landscapes. Keeping up-to-date with the latest cybersecurity regulations and standards ensures your company remains compliant, thus avoiding costly penalties and reputational damage.
Who would have want to pay regularly for help in case of emergency data leakage in a company? It’s much better to educate the employees and prevent any cybersecurity risks.
After our course, you will be educated in the possible threats and you will identify any suspicious activity online with ease.
During this 35-hour super intensive training you will gain crucial cybersecurity knowledge and skills in terms of Incident Response in the Cloud. Moreover, you will be able to:
This course is delivered by one of the greatest, world-renowned Cybersecurity Experts with practical knowledge from tons of successful projects, many years of real-world experience, great teaching skills and no mercy for misconfigurations or insecure solutions.
Learn more about our offer in terms of Consulting. Our Cybersecurity Experts perform consulting work on a daily basis, hence we are fully prepared for any challenge.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
