Summary
There are a number of handy tools you can use to check your security posture in Azure, run vulnerability scans, and conduct simple pentests. All of the information you can acquire from these tools can be useful to include in your pentest report.
Microsoft Defender for Cloud is your main security posture hub. It provides security recommendations, security alerts, attack path analysis, troubleshooters, and security configuration information. Azure Firewall Manager is also built in. Azure Firewall helps to allow and deny activity in your Azure instance. You definitely want to deny activity that could help a cyber threat actor!
The Azure Cloud Shell CLI can be executed in your web browser while you’re logged in to Azure’s web application. We can install and run third-party pentesting tools from Azure Cloud Shell.
Prowler is just as useful for pentesting Azure as it is for pentesting AWS.
MFASweep is specifically for Azure. It’s the most effective...
