Eric Woodruff
Identity Nerd | Microsoft Security MVP
Schenectady, New York, United States
As a Microsoft Security Most Valuable Professional (MVP) and Microsoft Certified Trainer (MCT), Eric has held a mix of roles through his 23 plus years in the IT field. He has been a technical manager in the public sector, a Sr. Premier Field Engineer at Microsoft, and a Security and Identity Architect in the Microsoft partner ecosystem. Eric is currently a Product Technical Specialist at the ITDR pioneer Semperis, where his unique history from “different sides of the fence” strengthen and influence his Microsoft identity expertise and his views on the identity and security industry. In support of the professional community, Eric has spoken about identity security topics, participates on the IDPro Body of Knowledge Committee, and blogs about Entra and related cloud security topics.
Links
Awards
Area of Expertise
Topics
BSidesChicago 2023 Upcoming
CollabDays New England 2023 Upcoming
Session is "The common findings from real world Entra ID Security Assessments"
https://www.collabdays.org/2023-ne/sessions/
Triangle InfoSeCon 2023 Upcoming
Blue Team Con 2023
At Blue Team Con 2023 I delivered the session "Building Yourself Into a Stronger Identity Practitioner" to help security professionals understand the breadth and depth of blue and purple team positions available within the world of identity.
https://blueteamcon.com/2023/talk-tracks/talk-track-2-25-minutes/
HIP Global 2023
My session was "Filet-O-Phish: What makes phishing-resistant authentication phishing-resistant", covering both why many forms of MFA and authentication are not resistant to modern phishing attacks, and why passkeys and technology like Windows Hello for Business are. The session included a live demonstration of the use of evilginx to perform a phishing attack and token replay to breach a users account into Office 365.
With the disappearance of the network perimeter, identity has become the last line of defense from cyberattacks. Hybrid Identity Protection (HIP) is a global events series focused on helping organizations meet the identity and access management challenges that arise in today’s fast-moving business environment. Our mission is to make the world a safer place through intelligent collaboration and knowledge sharing.
BSides Rochester 2023
A discussion covering the management plane/metastructure for cloud environments, the relationship between the control plane and the management plane, and how highly privileged access could allow for vast access to resources if breached.
Eric Woodruff
Identity Nerd | Microsoft Security MVP
Schenectady, New York, United States