CyberWiseCon Europe 2025

Jorge de Almeida Pinto: Mismatching Core Identity Stores After Recovery!

42:58 · 20 May 2025 – 23 May 2025 · YouTube

About this talk

In this session, Jorge de Almeida Pinto addresses the challenges organizations face when recovering from ransomware attacks on Active Directory, a crucial identity store. He explores the crucial steps to take after a forest recovery, emphasizing the importance of assessing AD's security and mitigating risks before reconnecting to Entra ID. The talk also covers how to conduct a gap analysis to identify potential issues, as well as the differences between using Entra AD Connect Sync and Entra Cloud Sync. Participants will gain insights into managing the impacts on user experience and data loss within a hybrid identity environment.