Haflidi Fridthjofsson
Microsoft Security MVP | Principal Cloud Architect & Tech Lead
Oslo, Norway
Haflidi, a Principal Cloud Architect & Tech Lead, is a recognized Microsoft MVP with a specialization in Azure & Security. His expertise encompasses Azure Infrastructure, Security, and Automation, with a particular emphasis on Secure Code, Identity & Access Management, Policies & Governance, Azure DevOps, PowerShell, GitHub, and Infrastructure as Code using both Terraform and Bicep.
Passionate about knowledge sharing, Haflidi has a knack for making complex concepts approachable. He regularly contributes to his blog at https://www.azureviking.com and on LinkedIn, where he shares insights and tutorials on various topics. As a relatively new but engaging speaker at conferences and user groups, he actively participates in the tech community, sharing his knowledge and learning from others.
In addition to his professional commitments, Haflidi is dedicated to fostering and contribute to a vibrant and inclusive tech community. As a co-owner and organizer of the Microsoft Security User Group (MSUG) https://meetup.com/microsoft-security-user-group, he plays a pivotal role in its growth and development.
Awards
Area of Expertise
Topics
Deploying your Infrastructure and workloads within a private & secure network.
In this session, we are going to explore the different ways of how to deploy your Infrastructure within a private and secure network. We'll have a look at some fresh and exciting ways to host your Azure DevOps Agents and Github Action Runners directly within your own virtual network. Whether it's deploying your Infrastructure as Code, accessing your Terraform state files or pushing web applications to App Environments, these agents can communicate safely with your workloads that are tucked behind Azure's private endpoints.
So you want to go passwordless ?
Join me on a journey toward a passwordless future. In this session, I’ll explore the available alternatives, including passkeys and the authenticator app. We will also check out some effective strategies for passwordless rollout and how to boost your defenses against phishing attacks.
Azure Governance with Azure Enterprise Policy As Code.
Azure Governance is a set of capabilities that help you control and protect your applications and resources in Azure. One of the key components of Azure Governance is Azure Policy, which allows you to define and apply policies for your cloud resources to help you ensure that your cloud environment follows the rules and best practices that you set for your organization. In this technical session, you will learn how to get started with the Azure Enterprise Policy As Code Framework (EPAC), which is a solution that helps you deploy and manage Azure Policies using code. You will also learn how Azure Enterprise Policy As Code (EPAC) can support your Azure Governance strategy and make it easier to implement and maintain policies at scale.
Meetup March 2024: Automated Security Monitoring, Safeguarding Apps & Ops
We are thrilled to invite you to our second in-person / hybrid meetup of the year on March 6th at 16:30 at the Microsoft Norway office.
This evening, we have the privilege of hosting two speakers.
Truls Dahlsveen will talk about Automated Security Monitoring and show us some impressive demos. Then, our own organizer Anders Kristiansen will share his insights on Safeguarding Applications & Operations within Entra ID.
Don’t miss this chance to learn from these experts and network with other security enthusiasts.
We are grateful to Microsoft Norway for sponsoring this event. They are not only offering us a venue, but also providing food & drinks for everyone.
Virtual Lunch Meetup - Surprising ways to escalate privileges in Entra ID
Join in to our second run of Virtual Lunch meetup where MVP Marius Solbakken will lead you through surprising ways to escalate privileges in Entra ID.
Session details.
⭐️ Surprising ways to escalate privileges in Entra ID
📅 Tuesday 20th february 2024 📅
🕜 11.00 CET @ Online
Entra ID is rather secure by default, but it is fairly easy to configure and delegate in unsecure fashions, opening new paths to become Global Administrator. In this demo heavy session you'll learn about commonly seen pitfalls and how to avoid them.
Meetup January 2024: Copilot, Security and Purview.
We're super excited to kick off 2024 and invite you to our first In-person-only meetup on January 10th at 16:30 at the O3 Cyber office. It's all about learning cool stuff about Security and Copilot, and Microsoft Purview, and having a great time with people who love this stuff as much as you do.
Big thanks to O3 Cyber for sponsoring this event. They're not only providing us a place to meet but also sorting out food & drinks for all of you. And hey, there might be a different type of beverage in store as we celebrate the start of the year together.
Festive Tech Calendar 2023 Sessionize Event
MVP-Dagen 2023 Sessionize Event
Virtual lunch Meetup - Next generation access model
Get ready to learn how you can build a generation access model! 🚀
Topic: Do’s and don’t with tiering of cloud and AD: Real-life experience using Enterprise Access Model.
Learn about the Enterprise Access Model; Microsoft's recommended method, which supersedes and replaces the legacy tier model.
Enterprise Access Model supports modern enterprises that spans on-premises, multiple clouds, internal or external user access, and more.
See examples of:
How to make PIM for AD - using PIM for Entra ID and a small script from the speaker.
Other community scripts developed by the speaker: PIM Assignment Revoker, PIM Assignment Wizard, PIM Baseline Automation and more.
Examples of naming conventions and learn how the speakers recommend target delegations.
Get a good understanding of when to use Administrative Units. Understand the pitfalls and limitations so you avoid them. We will also discuss how to implement the access model using automation.
In short: get ready to learn how you can build next generation access model.
Microsoft Security User Group: October meetup 2023
We are excited to kick off this season's meetup series at the Crayon Headquarters and welcome both new and existing members of the Microsoft Security User Group.
To join us on the evening of October 9th, we have Craig Forshaw from Crayon that will talk about securing IaC with Microsoft tooling. We are also joined by Erlend Andreas Gjære from Secure Practice, stepping in last minute to fill the final timeslot due to intitial speaker being prevented from joining us. So looking forward to this!
Don't miss this opportunity to learn more about Microsoft Security solutions and related topics, connect with like-minded individuals, share knowledge, and hopefully have a good time. So, RSVP today!
We are thankful for our sponsors, without you this wouldn't be possible. A special thanks to Crayon for sponsoring this event by providing the venue, food, and beverages.
One year anniversary of MSUG - Build After Party
Microsoft Security User Group's first anniversary!
Agenda (AI-Edition):
* Security Recap updates from Microsoft Build (and other security-related updates) and introduction to new AI Capabilities from Microsoft
Linda Andersen (Avanade), Anders Kristiansen (Devoteam), Craig Forshaw (Crayon)
* AI and LLM (how can we use it for offensive and defensive Security?) Marius Sandbu (Sopra Steria)
We can enhance the abilities of OpenAI services by utilizing tools such as AutoGPT and Langchain, providing it with Internet access and built-in memory. This session aims to show the LLM ecosystem such as OpenAI, Dolly, AutoGPT, and Langchain for enabling us to create our pre-trained defensive and offensive security model.
* Panel Discussion
How will introducing AI based on LLMs impact our work as IT security professionals? Will the attack vectors change? This and more!
Meetup: March 2023 - DevSecOps & Capture the flag exercise
Welcome to the first Microsoft Security User Group event in 2023!
Join us on March 21st at 16:30 at the Devoteam Norway office for an evening of learning and networking with fellow security professionals.
Don't miss this opportunity to learn more about Microsoft security solutions and meet like-minded people. RSVP today!
Agenda:
16:30 - Doors open / mingling / food & drinks
17:00 - DevSecOps - Securing value chain from development to production - Marius Sandbu
17:45 - Break
18:00 - Intro to Devoteam and Capture the flag - Anders Kristiansen
Microsoft Security User Group - December 2022 meetup
Welcome back to the next installment of our Microsoft Security User Group Meetup!
Our December meetup will have some exciting presentations concerning all things Microsoft security.
We look forward to seeing you.
Agenda:
16:30 - Doors open, mingling & food - Pizza & Soda Sponsored by Microsoft
17.00 - Welcome and introduction - MSUG
17:05 - Azure AD and DevSecOps in the context of Azure/GitHub Enterprise - Jan Vidar Elven
18:05 - Break
18:15 - DevSecOps for AKS highlighting different security controls throughout the value chain - Kristina Devochko
19:15 - Wrap up / mingling
20:00 - Door closes
Microsoft Security User Group - Ignite After Party - Security
Not able to attend #MSIgnite, or do you want to dive deeper into the new Security product announcements? We got your back - join our Ignite afterparty on 26/10/22 to discuss, test, and share knowledge related to the products listed in the book of news chapter 8, 8.1. 👉 https://news.microsoft.com/ignite-2022-book-of-news/
In person event
There will be flexibility for more discussions and short presentations/demos - feel free to bring your laptop and share!
Microsoft Security User Group - Microsoft Sentinel Part 2
Welcome back to the next installment of our Microsoft Security User Group Meetup!
We will be kicking off autumn with some exciting presentations concerning all things Microsoft security.
We look forward to seeing you.
Microsoft Security User Group - Microsoft Sentinel Part 1
Welcome back to our second Microsoft Security User Group Meetup!
Following the excellent feedback we received from our kickoff in April we have decided to start the next meetup with the most popular request from the community - Microsoft Sentinel.
We will deliver Sentinel over two meetups with part 1 of Sentinel covering the fundamentals with a further part 2 session to be delivered in September.
Microsoft Security User Group - Kick-off
Microsoft Security User Group Kick-off event where my fellow organizers and I hosted the event with sponsorship from Microsoft Norway, and where my colleague and I had 45 minute session about How to Secure your Identity in Azure Native World.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top