Fabio van der Burg
MCT | Technical Consultant | Nerdfluencer | KPN Partner Network
Capelle aan den IJssel, The Netherlands
Actions
Fabio van der Burg is a Microsoft Certified Trainer and technical consultant who has spent years deep in the Microsoft Modern Workplace: Microsoft 365, Azure, Intune and security. His favourite trick is taking the complicated stuff and making it simple enough that people actually use it. He speaks at events and partner days across the Netherlands, streams live on Twitch, and is founder of Modern Nerdplace, a user group for IT enthusiasts and MSPs. He also built goldenmaster.cloud, a Microsoft 365, Intune and Entra baseline for MSPs. You will recognise his work by the emojis in his Conditional Access policy names.
Area of Expertise
Topics
😄🚦🛡️ Conditional Access, but make it readable
Why are my Conditional Access policies full of emojis? Because a policy nobody understands is a policy nobody maintains. In this session I show my naming system, and then the part that really keeps a workplace safe: how device settings, compliance policies and Conditional Access form one chain. Settings harden the device, compliance proves it, Conditional Access enforces it at every sign in. Break one link and the rest is decoration. Live in a real tenant, with the baseline I use at customers.
Target audience: IT admins, consultants and MSPs working with Microsoft Entra ID and Intune. Beginners welcome, seasoned admins will still pick up a trick or two.
Level: 200 to 300.
Duration: 45 or 60 minutes, can be extended to a hands on workshop.
Language: English or Dutch.
Your MFA just got phished: stopping AiTM attacks
Adversary in the middle kits sit between your user and the real sign in page, let MFA succeed, and walk off with the session cookie. I show the attack live, then close the doors one by one: authentication strengths, requiring a compliant device, token protection, risk based policies and continuous access evaluation. And then the fun part: why passkeys make the whole trick fall apart, and how to roll them out without a help desk riot.
Target audience: IT admins, security engineers, consultants and MSPs responsible for Microsoft Entra ID.
Level: 300.
Duration: 45 or 60 minutes.
Language: English or Dutch.
Axios got owned: from supply chain attack to unified SOC
One compromised npm package, more than 100 million systems. I walk through how the attackers got in through Axios, step by step, from the poisoned release to the first foothold on a developer machine. Then the real question: how could we have stopped this inside a Microsoft environment? The right set of policies, awareness that actually sticks, and Defender with a unified SOC that connects the dots before the attacker does. You leave with a list of things to turn on tomorrow.
Target audience: IT admins, security engineers, consultants and MSPs working with Microsoft Defender and Microsoft 365. Also relevant for development teams.
Level: 200 to 300.
Duration: 45 or 60 minutes.
Language: English or Dutch.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top