After the Cyberattack – Best Practices for Resynchronizing AD and Entra ID

With cybercrime on the rise, ransomware attacks that target Active Directory (AD)—the primary identity store for most businesses worldwide—are as common as a cup of coffee. If, like many organizations, you have a hybrid identity environment that combines AD with Entra ID, are you prepared for the aftermath of a worst-case scenario?

If your AD was burned to the ground, you hopefully have (at a minimum) backups to perform a forest recovery. But what then? Knowing which precautionary measures to take to minimize data loss and impacts to the user experience within Entra ID is of utmost importance!

In this session, you will learn how to perform a GAP analysis and how to close any disclosed GAPs before reconnecting AD and Entra ID and enabling synchronization. You will also learn the differences between the use of Entra AD Connect Sync (formerly known as Azure AD Connect Sync) and Entra Cloud Sync (formerly known as Azure AD Cloud Sync).

Slide Deck: https://www.semperis.com/wp-content/uploads/resources-pdfs/hipconf-2024/after-cyberattack-best-practices.pdf