Phishing and Business Email Compromise remain one of the largest risks faced by Organizations of all sizes in 2023. A March 2022 report from the FBI said it received close to 20,000 BEC complaints last year, with estimated adjusted losses of roughly $2.4 billion USD. This talk will shine light on the latest attack techniques used by Threat Actors to gain access to Azure & Office365, Bypass Multi-Factor Authentication (MFA), cover their tracks and operate in the environment from the perspective of an Incident Responder. We will demonstrate how the attacks appear within Microsoft 365, and how organizations can better respond to such types of incidents.