July 6, 2022, 11:23 p.m. | Security BSides San Francisco

Security BSides San Francisco www.youtube.com

Brad Richardson • Madhav Bhatt - So You Think You Can Secure Your Cloud : Red Team Engagements in GCP

This is a detailed guide for adversary simulations in GCP that covers how to get an initial foothold, persist, escalate privileges, use Google's own products as C2, manipulate firewall rules and compute instances, abuse Key Management Service and Google Cloud Storage to decrypt and exfiltrate data.

Sched: https://bsidessf2022.sched.com/event/rjrR/so-you-think-you-can-secure-your-cloud-red-team-engagements-in-gcp

brad cloud red team team

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Security Officer Hospital Mission Viejo

@ Allied Universal | Mission Viejo, CA, United States

Junior Offensive Cyber Security Researcher

@ Draper | Cambridge, MA, United States

Consultant reporting reglementaire

@ Talan | Luxembourg, Luxembourg

Chief Information Security Officer

@ Kantox | Barcelona, Catalonia, Spain