A hands-on breakdown of the three hybrid identity authentication methods used in enterprise Microsoft environments — Password Hash Sync, Pass-Through Authentication, and ADFS. Covers how each method works under the hood, when organizations choose one over another, and the real security tradeoffs involved. Includes a step-by-step lab walkthrough of deploying each method using Azure VMs, Azure AD Cloud sync, and Entra ID.

A hands-on lab using azqr to scan an intentionally vulnerable Azure infrastructure for misconfigurations

A comprehensive guide to CSPM tools like Prowler, Checkov, ScubaGear, Maester, azqr, and ThreatMapper for cloud security assessment and compliance auditing across Azure, AWS, and GCP.

This post explores the identity and authentication protocol that support modern day web infrastructure