So You Think You Can Secure Your Cloud: Red Team Engagements in GCP

Brad Richardson • Madhav Bhatt - So You Think You Can Secure Your Cloud : Red Team Engagements in GCP This is a detailed guide for adversary simulations in GCP that covers how to get an initial foothold, persist, escalate privileges, use Google's own products as C2, manipulate firewall rules and compute instances, abuse Key Management Service and Google Cloud Storage to decrypt and exfiltrate data. Sched: https://bsidessf2022.sched.com/event/rjrR/so-you-think-you-can-secure-your-cloud-red-team-engagements-in-gcp