Migrating services to the cloud can provide a wealth of security benefits – if done correctly. Targeted attacks pose unique challenges from both a defensive forensic perspective if not designed correctly. Join Michael on a journey through some of the common mistakes encountered by the Microsoft Detection and Response Team (DaRT) team during targeted attack incident response investigation recovery.