Hiding in the Clouds - Abusing Azure DevOps Services to Bypass Microsoft Sentinel Analytic Rules

This presentation examines attacks against Azure DevOps Services, including reconnaissance, privilege escalation, persistence, and defense evasion that bypass default Microsoft Sentinel analytic rules. It also provides defensive guidance for protecting Azure DevOps and improving the rules, with demonstrations using the ADOKit toolkit.