1) Topics covered for this series, 2) Frequency of these parts, 3) Explanation style, 4) My credentials and CyberSecurity Certifications.
This multi-part series is for anyone who is beginning to learn about Azure App Security, learn about Azure Penetration Testing, use tools in that evades / bypass MDI ( Microsoft Defender for Identity ), MDE (Microsoft defender for cloud ) etc. Currently I am learning this certification ( CAWASP — Certified Azure Web App Security Professional ), so I thought it would be a great idea to put together in writing about what I learn.
1) Topics covered for this series — Here are the high level topics that we will cover for the entire series.
- Azure Services Recon and Enumeration
- Various App Services available in Azure
- Authentication and Authorization processes
- Azure WAF
- App Registration, Enterprise Apps and Conditional Acceess Policy
- Function Apps
- Key Vaults
- Storage Accounts
- Databases
- Application Proxy and Azure API Management
- Microsoft Defender for Cloud and Microsoft Defender for Cloud Apps
- Defense and Detection.
2) Frequency of these parts ( series of blogs ) — The frequency would be almost daily. You will find an article almost every day.
3) Explanation style — I will introduce a topic with a heading, then write some content about it and finally give some examples and screenshots. This way the explanation would be a bit clear and would seem more understandable. The topics would be laid out mostly in indentation format. A topic would be discussed, then points for that topic would be neatly indented below the topic name so that readers have a focus on that topic. An Example layout is given below:
- Topic1 -
- Topic1 Explanation — Topic1 Explanation — Topic1 Examples and Relevant images
- Topic2 -
- Topic2 Explanation — Topic2 Explanation — Topic2 Examples and Relevant images
4) My Credentials and CyberSecurity Certifications -
- I have earned around 6–7 CyberSecurity Certifications including — eJPT (eLearn Junior Penetration Tester ), CRTP ( Certified Red team Professional ), eWPT (eLearn Certified Web Penetration Tester ), CRTE ( Certified Red team Expert ), CARTP ( Certified Azure Red Team Professional ) , ADCS — CESP ( Certified Enterprise Security Professional ).
- Currently, I am pursuing CAWASP ( Certified Azure Web App Security Professional ).
5) My Other Credentials and Certifications — Azure (x7 ), CCNA, Comptia Cysa+, Comptia CASP+, Comptia Pentest+.
Feedbacks are welcome in comments section, personal email.
Please do share this amongst your group, like-minded people interested in Azure App Security.
Link to CAWASP — https://www.alteredsecurity.com/azureappsec
List of my other stories — https://medium.com/@bloggertech927