Azure VM Security: Part 1: Moving from management plane to data plane and the Run Command

Introduction This is the first of a series where I will be exploring the ways a threat actor can move from the Azure Management plane, into the operating system level of Azure Virtual Machines. This series will be dealing with the security properties (and attacks) that exist specifically because this is an Azure VM. The normal security measures at the OS and network level are obviously still relevant, but is not something I will detail here....

March 3, 2023 · 9 min · soroganoth