In this Professionally Evil Webcast we delve into the unintended benefits of Infrastructure as Code (IaC) for red team operatives. As we navigate the delicate balance of active reconnaissance within red team engagements, the risk of detection by blue teams is ever present when interacting too frequently with their services and systems. However, blue teams unwittingly provide us a powerful tool in IaC, originally crafted for the repeatability and elasticity of their cloud deployments. By harnessing IaC to consistently and rapidly redeploy our active reconnaissance infrastructure, we can cloak our activities, effectively evading detection and bypassing normal thresholds that could trigger defensive measures. Join us to learn more about the subtle nuances and often-overlooked strategies of offensive IaC, empowering your red team to maintain stealth, maximize insights, and gain a decisive edge in the game.
Demo - • Cloudy with a Chance of Stealth - DEMO
Host Bill McCauley with Secure Ideas Consultants Aaron Moss and Alex Rodriguez