search

DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
https://stratus-red-team.cloud
Apache License 2.0
1.67k stars 200 forks source link

Analyze Unit42 blog post, measure coverage and propose new attack techniques #527

Open christophetd opened 2 weeks ago

christophetd commented 2 weeks ago

https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/

siigil commented 4 days ago

Based on this writeup, created the following issues to track new attack techniques that are not yet covered:

Additionally, added a comment to #487 to note that this technique was mentioned.

4 AWS + 3 Azure techniques are already covered, will be creating a PR to update these techniques with a reference to this writeup.

christophetd commented 4 days ago

Looks great, based on this it sounds like we can close this issue?

siigil commented 4 days ago

Opened PR for documentation update, ok to close.