An Awesome Guide To Better AD Defense
TL;DR: It's a framework for how to assess the security of an Azure DevOps setup in the spirit of OWASP WSTG
Preview of our comprehensive guide to assessing the security of Azure DevOps Enviornments
What you need to know and how to not follow in their footsteps