{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"7MS #723: CARTP - Cloud Red Team Tactics for Attacking and Defending Azure - Part 1","description":"Hello friends! Today\u2019s a hybrid episode \u2014 some security content up top about a new certification I\u2019ve kicked off, followed by an aggressively quick trip to Tangent Town. Feel free to bail after the security stuff if tangents aren\u2019t your thing! The security part: starting CARTP I\u2019ve started the Certified Azure Red Team Professional course from Altered Security (enterprisesecurity.io). It\u2019s the Azure follow-up to CRTP, which I took a few years back. Quick notes: Why now: Active Directory and internal pentests will always be my first love, but more and more of our customers are shifting to hybrid or full-Azure environments. Time to get some formal training in that lane. Self-paced vs. live: They offer both. I\u2019m past the point of giving up Saturdays to security training, so I went with the ~$500 self-paced 30-day option. You get a portal, a lab manual, and a remote Windows VM with low-priv creds into a target Azure tenancy to attack and enumerate. The catch: The lab manual is thorough on \u201cdo this, see this output\u201d steps, but light on \u201cand here\u2019s the wow moment hiding in line 47 of the output.\u201d With the live class, an instructor would highlight that stuff in real time. In the self-paced version, you\u2019re on your own to find the meaning in 200 lines of output. The fix: Started a Claude project that\u2019s effectively co-teaching the class with me. I paste command output and ask \u201cwhat\u2019s the important bit here?\u201d \u2014 Claude pulls out the line that matters and explains why (e.g., \u201cthis user has write access to a key vault, which means\u2026\u201d). Way more efficient than ALT-TABbing alone. Tools I\u2019ve touched so far: ROADtools, GraphRunner, and Monkey365 (kind of a PingCastle-for-Azure that spits out a health-check report). Where I\u2019m at: Module 4 of 40-something. Course culminates in a 24-hour exam, which I swore I\u2019d never do again after CRTP \u2014 but James Bond and Justin Bieber both say \u201cNever say never.\u201d Tangent Town: The Shake Shack incident. It\u2019s gross and not funny. But kind of funny. Saw (and sort of met) Calum Scott at the Fillmore in Minneapolis. Standing-room-only venue, but my wife found a clutch spot wedged between a security barrier and a support beam, perfect for our family. During an acoustic set, Calum and his band came right past us. My wife (unable to help herself) gave his shoulder a squeezy squeeze. I held out for the fist bump on his return trip to the stage \u2014 and we\u2019re basically best friends now. I highly recommend his show: very positive guy, family-friendly, genuine. Seven super-fast non-spoilery movie reviews from plane rides and hotel nights: Coherence \u2014 for smart people. I am not those people. Probably great if you can follow it. Deadstream (Netflix) \u2014 YouTuber live-streams a night in a haunted house. Surprisingly entertaining, a couple of real jump-scares. Get Away \u2014 a family vacations on a forbidden island. Goes somewhere unexpected in the third act. Hell House LLC \u2014 found-footage haunted house. A couple of genuine flinches; story was just OK. Hokum \u2014 Adam Scott as a writer at a hotel with a personal history. Creepy-crawly, goes to some dark places. Loved it. Predator: Badlands \u2014 went in expecting mind-numbing action, but I loved it! I\u2019d give it an 8 or 9 out of 10. It had action, LOLs, and even some tender Predator moments. Going to watch it again soon. Obsession \u2014 young man buys a wish-granting trinket so a young lady will like him. It works. Then it really works. The movie slowly goes into full-on bonkers sauce mode! Satisfying but uncomfortable to watch at parts. That\u2019s it! 7MinSec.com for services, 7MinSec.club for the Substack, 7MinSec.wiki for pentest tips and scripts. ","author_name":"7 Minute Security","author_url":"https:\/\/7MinSec.com","html":"