Scott Sutherland @nullbind.bsky.social · 02/04/2025I had a great time at #socon2025! Big thanks to the SpecterOps crew for hosting. Slides for my "Hunting SMB Shares" talk are below for those who are interested. Slides github.com/NetSPI/Power... PowerHuntShares github.com/NetSPI/Power... 032
Reposted by Scott SutherlandKarl Fosaaen @kfosaaen.bsky.social · 08/01/2025And here's a link to the blog - www.netspi.com/blog/technic...netspi.comHijacking Azure Machine Learning Notebooks (via Storage Accounts)Abusing Storage Account Permissions to attack Azure Machine Learning notebooks 021
Reposted by Scott SutherlandKarl Fosaaen @kfosaaen.bsky.social · 08/01/2025In addition to the blog out today, there's a new tool in MicroBurst - Get-AzMachineLearningCredentials This one has been in the works for a while, but it's a tool to dump the credentials that are stored by the Azure Machine Learning service. github.com/NetSPI/Micro...github.comMicroBurst/Az/Get-AzMachineLearningCredentials.ps1 at master · NetSPI/MicroBurstA collection of scripts for assessing Microsoft Azure security - NetSPI/MicroBurst 153
Reposted by Scott SutherlandSpecterOps @specterops.io · 29/11/2024Today is #BloodHoundBasics Day! 🙌 We commonly see Domain Admins peppered across Organizational Units. This can degrade your security posture by making Group Policy enforcement hard to understand or audit. BloodHound helps by visualizing BOTH the OU placement AND group membership. 🧵 1/2 181
Scott Sutherland @nullbind.bsky.social · 28/11/2024PowerHuntShares.v2: New Sample HTML Report Here is a sample report for those who wanted it. Enjoy! raw.githubusercontent.com/NetSPI/PowerHu… 111
Reposted by Scott SutherlandRussel Van Tuyl @russelvantuyl.bsky.social · 22/11/2024This State of Generative AI report from Menlo Ventures provided some good insights on where cybersecurity professionals might look for risk in terms of assessments and research. menlovc.com/2024-the-sta...menlovc.com2024: The State of Generative AI in the Enterprise - Menlo VenturesThe enterprise AI landscape is being rewritten in real time. We surveyed 600 U.S. enterprise IT decision-makers to reveal the emerging winners and losers. 221
Reposted by Scott SutherlandAndy Robbins @andyrobbins.bsky.social · 19/11/2024I couldn't find any PowerShell examples of encrypting/decrypting data w/ Azure Key Vault keys, so I made some: Protect-StringWithAzureKeyVaultKey Unprotect-StringWithAzureKeyVaultKey github.com/BloodHoundAD... Explanatory blog post coming soon.github.comAdd key vault cryptographic op funcs · BloodHoundAD/BARK@e1c82a1 1166
