Visão Geral

Este curso aborda ataques e mecanismos de defesa relacionados a credenciais em ambientes cloud, incluindo identidades humanas, workloads, tokens, secrets, service principals e controles de proteção.

Objetivo

Após realizar este curso, você será capaz de:

• Identificar ataques contra credenciais cloud
• Avaliar riscos de IAM
• Detectar comprometimento de identidades
• Implementar controles defensivos

Publico Alvo

• Cloud Security Professionals
• IAM Professionals
• SOC Analysts
• Cloud Administrators

Pre-Requisitos

• Conhecimentos de cloud computing
• Familiaridade com IAM
• Conhecimentos básicos de Azure e AWS
• Noções de autenticação
• Conhecimentos básicos de SIEM

Conteúdo Programatico

Module 1: Cloud Credential Security

1. Cloud identity architecture
2. Human identities
3. Workload identities
4. Service accounts
5. Service principals
6. Access tokens
7. API keys
8. Secrets
9. Credential attack surface
10. Cloud credential security

Module 2: Credential Exposure

1. Secret exposure
2. API keys
3. Access tokens
4. Application secrets
5. Environment variables
6. Configuration files
7. Source code exposure
8. Cloud metadata
9. Credential discovery
10. Credential exposure prevention

Module 3: Cloud Credential Attacks

1. Credential theft
2. Token theft
3. Account takeover
4. Password attacks
5. API key abuse
6. Service principal abuse
7. Workload identity abuse
8. Privilege escalation
9. Persistence
10. Credential attack detection

Module 4: Identity Attack Paths

1. IAM enumeration
2. Permission analysis
3. Privilege escalation
4. Role abuse
5. Trust relationships
6. Cross-account access
7. Cross-tenant access
8. Identity attack paths
9. Attack graph concepts
10. Identity risk assessment

Module 5: Credential Defense

1. Least privilege
2. MFA
3. Conditional Access
4. Managed identities
5. Secret management
6. Key rotation
7. Token protection
8. Privileged access
9. Credential monitoring
10. Credential hardening

Module 6: Detection and Monitoring

1. Authentication logs
2. API activity
3. Identity events
4. Privileged activity
5. CloudTrail concepts
6. Azure activity logs
7. SIEM integration
8. Identity threat detection
9. Anomaly detection
10. Cloud credential monitoring

Module 7: Incident Response

1. Credential compromise
2. Identity containment
3. Token revocation
4. Key rotation
5. Account remediation
6. Privilege reduction
7. Evidence collection
8. Attack reconstruction
9. Recovery
10. Post-incident monitoring

Module 8: Practical Cloud Credential Defense

1. Credential exposure assessment
2. IAM attack path analysis
3. Authentication investigation
4. Token investigation
5. Privileged identity analysis
6. Cloud log investigation
7. Credential remediation
8. Security control validation
9. Detection development
10. Cloud credential attack case studies