Closing the Visibility Gap: Threat Hunting with Hawk in the Microsoft Cloud

This conference talk at BSidesCharm 2025 explores how security teams can overcome visibility challenges in Microsoft Cloud environments using Hawk, a free open-source solution. Learn how Hawk automates essential log collection, reduces investigation time, flags high-risk behaviors, and enables effective threat hunting without costly commercial solutions. The presentation features three experienced speakers: Jonathan Butler, an active-duty Marine and core Hawk contributor with 20+ years in cybersecurity; Lorenzo, a Senior Cloud Solutions Architect at Microsoft with 27 years of IT experience including DoD infrastructure protection; and Paul Navarro, a Marine Corps veteran, Microsoft Cybersecurity Chief Architect, and Hawk core maintainer specializing in Microsoft Cloud forensics. Discover practical approaches to enhancing visibility and detection capabilities across the Microsoft cloud ecosystem.