Agenda

Tuesday, September 8, 2026
1:30 PM - 6:00 PM	Arrivals and Registration Open
Wednesday, September 9, 2026
7:30 AM - 8:45 AM	Breakfast
9:00 AM - 9:15 AM	Keynote Opening Remarks: Mickey Bresman
9:15 AM - 10:00 AM	Keynote Keynote: Sarah Gosler
10:10 AM - 10:55 AM	Crisis Management From Inbox to SharePoint: Catching Attackers Mid-Collection in Microsoft 365		Identity Masterclass LETs KILL NTLM
11:15 AM - 12:00 PM	Identity Security Research KDS Root Keys and Where to Find Them	Identity Masterclass Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls		Identity Masterclass The Security Upgrade You Can Deploy Today
12:10 PM - 12:55 PM	Identity Masterclass Mission-Critical Conditional Access at Scale	CISO Track Identity in the Uncertain World of AI		Crisis Management Identity Is the Business: Turning Identity Risk into Executive Action
1:00 PM - 2:00 PM	Lunch
2:00 PM - 2:50 PM	Identity Security Research AD Experts Panel		Identity Masterclass Taming Permissions Gone Wild: Building an Entra ID Application Governance Framework
2:00 PM - 3:45 PM	Identity Masterclass Identity Protection Workshop
3:00 PM - 3:45 PM	Identity Masterclass Let’s Kill NTLM (Vol. 2): The Kerberos Connection
4:15 PM - 5:00 PM	CISO Track CISO Panel	Identity Security Research Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them		Crisis Management Be the Champ, Not the Chump: Crisis Management That Actually Works
6:30 PM - 10:00 PM	Evening Event
Thursday, September 10, 2026
7:30 AM - 8:45 AM	Breakfast
9:05 AM - 9:50 AM	Keynote Keynote: Stuart McClure
10:00 AM - 10:45 AM	CISO Track Fear of Lockout: Confronting the Risk of Losing Tenant Access	Identity Masterclass License to Assist: Bringing AI Agents to Entra ID		Identity Security Research Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities
11:00 AM - 11:45 AM	Identity Masterclass Building a Shared Entra ID Tenant for Critical Infrastructure: Architecture and Security Decisions in Action		Crisis Management From Incident Response to Intentional Resilience
11:55 AM - 12:40 PM	Identity Security Research Age of Entitlement: Breaking and Securing Entra Access Packages		CISO Track Inside the Digital Mind: Cyber Psychology for Actionable Identity Security
12:40 PM - 1:30 PM	Lunch
1:30 PM - 2:15 PM	Identity Security Research Vibe Coding My Way to Global Admin: Using AI to Weaponize HR-Driven Privilege Elevation in Entra ID
1:30 PM - 3:05 PM	Identity Masterclass Identity Protection Workshop
2:25 PM - 3:05 PM	Identity Masterclass Cryptography, Trust Chains, and Wallets: Real-World Applications of Microsoft Verified ID
3:15 PM - 4:00 PM	CISO Track Recovering from Systemic Hybrid Identity Compromise		Identity Masterclass A Hybrid Identity Maturity Model that Actually Delivers Security Outcomes
4:15 PM - 5:00 PM	Identity Masterclass Beyond Baselines: Building Custom Identity Security Testing with Maester and PowerShell		Keynote Fireside Chat: Tim Brown

Time Zone: (UTC-05:00) Central Time (US & Canada) []

CISO Panel		Roger Brotz \| Acadia Health, CISO Barbee Mooneyhan \| Uplight, CISO Elliott Franklin \| Fortitude Re, CISO Joy Mangrum \| Diversity Health, VP, Technology
Fear of Lockout: Confronting the Risk of Losing Tenant Access		Tim Springston \| Semperis, Principal Product Manager
Identity in the Uncertain World of AI		Melissa Cronquist \| Walmart, Principal Engineer
Inside the Digital Mind: Cyber Psychology for Actionable Identity Security		Krista Arndt \| St. Luke's University Health Network, ACISO
Recovering from Systemic Hybrid Identity Compromise		Rich Peckham \| Semperis, Principal Security Consultant Tim Beasley \| Semperis, Senior Incident Response Consultant

Be the Champ, Not the Chump: Crisis Management That Actually Works		Benjamin Cauwel \| Capgemini, VP - Head of Cybersecurity
From Inbox to SharePoint: Catching Attackers Mid-Collection in Microsoft 365		Ryan O'Donnell \| Microsoft, Senior Security Engineer
From Incident Response to Intentional Resilience		Marty Momdjian \| Semperis, GM & EVP, Ready 1 Tim Beasley \| Semperis, Senior Incident Response Consultant
Identity Is the Business: Turning Identity Risk into Executive Action		Courtney Guss \| Semperis, Director of Crisis Management

A Hybrid Identity Maturity Model that Actually Delivers Security Outcomes		Michael Soule \| Sentinel Technologies, Director
Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls		Jake Hildreth \| Semperis, Principal Security Consultant Nicholas Valiensi \| Semperis, Senior Incident Response Consultant
Beyond Baselines: Building Custom Identity Security Testing with Maester and PowerShell		Merill Fernando \| Microsoft, Principal Product Manager Sam Erde \| Patriot Consulting, SecureShield Architect
Building a Shared Entra ID Tenant for Critical Infrastructure: Architecture and Security Decisions in Action		Samantha Kloos-Kilkens \| Argus IT, Owner & IAM Security Consultant
Cryptography, Trust Chains, and Wallets: Real-World Applications of Microsoft Verified ID		Michael Van Horenbeeck \| The Collective, CEO
Identity Protection Workshop
Identity Protection Workshop
LETs KILL NTLM		Linda Taylor \| Microsoft, Principal Software Engineer Toaster Hajjar Tapperi \| Microsoft, Principal Software Engineer
Let’s Kill NTLM (Vol. 2): The Kerberos Connection		Mariam Gewida \| Microsoft, Product Manager Steve Syfuhs \| Microsoft, Auth Platform Engineering Manager
License to Assist: Bringing AI Agents to Entra ID		Jan Vidar Elven \| Evidi AS, Senior Architect
Mission-Critical Conditional Access at Scale		Joe Kaplan \| Accenture, Portfolio Lead for Identity
Taming Permissions Gone Wild: Building an Entra ID Application Governance Framework		David Lundell \| Identity Managed, Founder/Architect
The Security Upgrade You Can Deploy Today		Nishant Kaushik \| FIDO Alliance, CTO

Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them		Brandon Colley \| TrustedSec, Senior Security Consultant
AD Experts Panel		Cliff Fisher \| Semperis, Senior Solutions Architect Derek Melber \| GuidePoint Security, Practice Lead - Microsoft Identity Rich Peckham \| Semperis, Principal Security Consultant Brandon Colley \| TrustedSec, Senior Security Consultant Michael Van Horenbeeck \| The Collective, CEO
Age of Entitlement: Breaking and Securing Entra Access Packages		Katie Knowles \| Datadog, Senior Security Researcher
KDS Root Keys and Where to Find Them		Michael Grafnetter \| SpecterOps, Principal Security Researcher
Vibe Coding My Way to Global Admin: Using AI to Weaponize HR-Driven Privilege Elevation in Entra ID		Eric Woodruff \| Semperis, Chief Identity Architect
Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities		David Lee \| Saviynt, Field CTO

2026 Session Catalog