Sriraam Natarajan
Sriraam Natarajan from India is an ardent information security practitioner with over 3+ years of specialized experience in red teaming, adversary simulation, penetration testing, and web application security. He enjoys doing Red Teaming exercises and researching new attack vectors, exploits, and evasion techniques. He also had a talk at Lehack Conference. He does coding to automate the boring stuff using Python and Rust. He is currently working as a Security Analyst in Cyber Security Works. He also holds the Certified Red Team Professional Certification.
Sessions
Organizations are increasingly relying on cloud services from Azure, as there is native support from Microsoft. After obtaining Domain Admin privileges, it is essential to always think of attack paths or scenarios to escalate our privileges or describe the maximum impact. One such thing is escalating privileges to Azure Services. This talk would demonstrate attack paths for obtaining Global Administrator privileges on Azure AD from domain admin privileges on the on-premise network. Multiple domains can be registered under a single tenant, hence after obtaining global admin privileges on Azure it is possible for the adversary to gain administrative access over these domains.