Identity & Access Security
OAuth Device Code Phishing: Detection and Response
Detect OAuth device code phishing in Microsoft Entra ID using sign-in evidence, KQL correlation, containment steps, and staged Conditional Access.
Category
Identity & Access Security
Practical guidance for identity, authentication, authorization, and accountable access.
9 resources
Resources in this category
Browse all resources
Identity & Access Security
What Is 3D Secure (3DS)? Process, Security, and Fraud
Learn how EMV 3-D Secure authenticates card-not-present payments, how frictionless and challenge flows work, and what 3DS can and cannot prevent.
Identity & Access Security
Password Managers, Credential Reuse, and Breach Response
Use unique credentials safely, protect password vaults, recognize credential stuffing, and respond proportionately when passwords may be exposed.
Identity & Access Security
OAuth Consent and Connected Applications: Safe Delegated Access
Understand delegated access, consent grants, scopes, tokens, connected-app risk, and the evidence needed to investigate or revoke access safely.
Identity & Access Security
Authentication, Authorization, and Sessions: How Digital Access Works
Understand how identities prove who they are, receive permissions, and carry reusable authority through sessions.
Identity & Access Security
Infostealers: Credential Theft, Session Theft, and Response
Understand how infostealers collect valuable access artifacts and how defenders contain, scope, and recover from exposure.
Identity & Access Security
Phishing-Resistant MFA and Secure Account Recovery
Compare authentication factors, recovery paths, and operational controls that resist phishing and help-desk abuse.
Identity & Access Security
Session Hijacking: Cookies, Tokens, Detection, and Response
Learn how sessions are created, stolen, replayed, detected, revoked, and investigated across browsers and cloud services.
Identity & Access Security
Windows Authentication Evidence
Correlate Windows sign-in, Kerberos, NTLM, and local session evidence across identity and endpoint systems.