azure Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/azure Exploring the intersection of cybersecurity, psychology, and resilience. Thu, 01 Jul 2021 18:27:25 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://jeanchristophvonoertzen.com/wp-content/uploads/2020/10/favicon-4.png azure Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/azure 32 32 Webinar takeaways: Attack Tactics 8 – Poison the Well https://jeanchristophvonoertzen.com/webinar-takeaways-attack-tactics-8-poison-the-well https://jeanchristophvonoertzen.com/webinar-takeaways-attack-tactics-8-poison-the-well#respond Thu, 01 Jul 2021 18:27:25 +0000 https://jeanchristophvonoertzen.com/?p=515 My key takeaways Bad documents eg with macros enabled in SharePoint? No need to bypass phishing controls anymore! Documents are already trusted by users Difficult to trace M$ SmartLockout is effective to reduce direct attacks FireProx (AWS) or Proxycannon-ng (OpenVPN) can circumvent it unsolicited push notifications to bypass MFA can’t be reported as phish might […]

The post Webinar takeaways: Attack Tactics 8 – Poison the Well appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaways-attack-tactics-8-poison-the-well/feed 0 Webinar Takeaway: Getting Started in Pentesting The Cloud – Azure https://jeanchristophvonoertzen.com/webinar-takeaway-getting-started-in-pentesting-the-cloud-azure https://jeanchristophvonoertzen.com/webinar-takeaway-getting-started-in-pentesting-the-cloud-azure#respond Thu, 27 May 2021 18:09:24 +0000 https://jeanchristophvonoertzen.com/?p=472 My key takeaways Hybrid environments make cloud to on-prem pivoting possible 3 attack surfaces external: public buckets internal resource access: internal to cloud internal api access: identify vulns via API calls & configuration analysis Azure and O365 are not the same Azure Resouce Manager : Subscriptions and Resources Microsoft Office 365: Productivity O365 accounts get […]

The post Webinar Takeaway: Getting Started in Pentesting The Cloud – Azure appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-getting-started-in-pentesting-the-cloud-azure/feed 0