A comprehensive guide that provides a structured approach to reviewing the security architecture of a multi-cloud SaaS company and finding its most critical components.

Multi-Cloud Security Auditing Tool. Contribute to nccgroup/ScoutSuite development by creating an account on GitHub.

Cloud Security Posture Management (CSPM). Contribute to aquasecurity/cloudsploit development by creating an account on GitHub.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments. - RhinoSecurityLabs/pacu

Azure Red Team tool for graphing Azure and Azure Active Directory objects - GitHub - Azure/Stormspotter: Azure Red Team tool for graphing Azure and Azure Active Directory objects

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team. - GitHub - RhinoSecurityLabs/GCP-IAM-Privilege-Escalation: A collection of GCP IAM privilege escalat...

This is written jointly with Tim Peacock and will eventually appear on the GCP blog. For now, treat this as “posted for feedback” :-)…

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps C...

As many of you already know, I have spent last couple of years purely focusing on security monitoring, leveraging Microsoft security solutions in the cloud. Even though, my work is focused on Micro…

Collection of Cloud and DevSecOps learning resources - chughes29/Cloud-DevSecOps-Learning

Healthcare providers are overconfident in their cloud infrastructure and unaware of how technology gaps and poor cyber hygiene leave protected health information exposed to potential breaches,

Talk by Aaron Jewitt - June 28th, 2023 at TROOPERS23 IT security conference in Heidelberg, Germany hosted by @ERNW_ITSec

#TROOPERS23 #ITsecurity
https://troopers.de/troopers23/talks/tj3urp

More impressions:
https://twitter.com/WEareTROOPERS
https://twi…