./kedeshur

thoughts on things

Powershell

5MCT - Attacking Azure Environments with PowerShell

As companies deploy and use Microsoft’s Azure cloud services more, the cloud platform becomes more of a target for threat actors. By default, all domain user credentials have access at Azure Portal, which contains information that is useful during a pen test. The ways this information can be accessed is through the web interface, a REST API, or PowerShell cmdlets. PowerShell cmdlets use integrated auth, return pipeline-able objects, produce malleable output, and handles large data sets at scale, so it is preferred.