Examines Microsoft Entra's Conditional Access policies' effectiveness in blocking adversarial bypass attempts

The study analyzes the efficacy of Microsoft Entra's Conditional Access policies in preventing adversarial bypass attempts, particularly in light of vulnerabilities highlighted by recent high-profile breaches, like those involving the Lapsus$ hacking group, aiming to provide insights into best practices for implementing zero-trust security measures for conditional access. ```

https://www.sans.org/white-papers/never-trust-always-verify-analysis-zero-trust-best-practices-conditional-access