Purple Teaming Cloud Identity: Simulation Labs for Red and Blue Teams

preview_player
Показать описание
SANS PenTest HackFest 2022

Speaker: Jason Ostrom, Certified Instructor, SANS Institute

The increased importance of the cloud and identity is not lost on attackers. To simulate adversary tradecraft, Red teams must be able to evolve offensive techniques against cloud identity systems. Cloud defenders must adapt quickly to understand these same attacks and instrument defenses. This talk will share practical use cases and effective open-source tools that security teams can use to advance their security programs. PurpleCloud is a tool allowing security professionals to create an Azure AD penetration testing lab and other attack and defense security simulations. Enhancements for practical use and Purple Teaming will be shared with participants.

Рекомендации по теме