https://pwsh.in/tags/entra-id/Recent content in Entra ID on Vibhu Bhatnagar — PowerShell & Infrastructure EngineerHugo -- gohugo.ioenTue, 21 Jul 2026 15:11:09 +0530https://pwsh.in/posts/ad-entra-security-concepts/Tue, 21 Jul 2026 15:11:09 +0530https://pwsh.in/posts/ad-entra-security-concepts/<h2 id="the-point">The Point</h2> <p>Ten security concepts sit underneath almost everything that goes wrong in Windows and cloud environments. Each one is a form of trust — Windows or Entra ID issuing a token, a ticket, or a permission and then trusting it without double-checking. Attackers don&rsquo;t invent new categories of attack; they find a way to get one of these ten things issued to them, forge it, or steal it. This post walks through each one in plain language, with a real example, the flaw that makes it exploitable, how to spot abuse, and how to close the gap.</p>