Breach at the Beach: Play the Ultimate Entra ID CTF

**Breach at the Beach** is a free Varonis CTF that provides hands-on labs simulating Microsoft Entra ID attack scenarios — including initial access, privilege escalation, lateral movement, persistence, and data exfiltration — to train defenders; the report outlines key Entra ID concepts, references real-world incidents (Storm-0558, Midnight Blizzard) as motivation, and lists practical defensive actions such as auditing service principals, enforcing PIM and Conditional Access, and monitoring Microsoft Graph activity.