Blog

Updated August 27, 2026 Back in 2012, I started teaching about Red Team, Penetration Testing, Active Directory Security and Offensive PowerShell. I did a couple of workshops at BlackHat plus some private classes and quickly identified there is a lack of a lab environment that is affordable, easy to access, has multiple connected machines and is fun to solve! I started using a cloud hosted lab environment in my classes and they were very popular! There was always a demand for

Hello Readers, Today, we are going to discuss about how BitLocker keys backed up in Entra ID can be abused. So, let's buckle-up and enjoy the blog. Table of contents Introduction In enterprise environments, organizational endpoints and servers often contain crucial data. So, to abide by data-at-rest policies, Microsoft introduced a security feature called BitLocker for Windows Operating systems. BitLocker is used to apply the protection of symmetric encryption for both Operat

Welcome to this deep dive into Azure security. Whether you are a red teamer, cloud security engineer or just curious about how Azure internals work, this blog has something for you. In this blog, we will discuss the concept of Global Azure Resource Manager (ARM) API endpoints and how they can be abused in certain Azure attack scenarios. To demonstrate this, we will walk through a hands-on lab from Altered Security's Red Labs platform (https://redlabs.enterprisesecurity.io/),