stratus-red-team
stratus-red-team copied to clipboard
New attack technique: Use GCP OSConfig (VM Manager) to Execute Code
Use VM Manager to Execute Code: GCP https://unit42.paloaltonetworks.com/cloud-virtual-machine-attack-vectors/
Suggested tags: kind/new-technique, platform/gcp
@christophetd thoughts on this? Would it be worth modelling it after one of these? https://stratus-red-team.cloud/attack-techniques/AWS/aws.discovery.ec2-enumerate-from-instance/ https://stratus-red-team.cloud/attack-techniques/AWS/aws.execution.ssm-start-session/
Absolutely, I think it makes sense to implement it like aws.execution.ssm-start-session