Visão Geral

Este curso aborda ataques e defesa de identidades em ambientes cloud, integrando IAM, autenticação, privilégios, workloads, tokens, aplicações e mecanismos de monitoramento.

Objetivo

Após realizar este curso, você será capaz de:

• Analisar ataques contra identidades cloud
• Identificar caminhos de privilégio
• Implementar controles defensivos
• Detectar comprometimento de identidades

Publico Alvo

• Cloud Security Professionals
• IAM Professionals
• Red Team e Blue Team
• Cloud Architects

Pre-Requisitos

• Conhecimentos de cloud
• Conhecimentos de IAM
• Familiaridade com Azure e AWS
• Conhecimentos de autenticação
• Noções de SIEM

Conteúdo Programatico

Module 1: Cloud Identity Architecture

1. Cloud identity models
2. Human identities
3. Workload identities
4. Service accounts
5. Service principals
6. Managed identities
7. Federation
8. Trust relationships
9. Identity lifecycle
10. Cloud identity attack surface

Module 2: Authentication and Access

1. Password authentication
2. MFA
3. Passwordless authentication
4. Federation
5. SSO
6. Conditional Access
7. Access tokens
8. Temporary credentials
9. Authentication policies
10. Authentication security

Module 3: IAM Attack Surface

1. IAM enumeration
2. Permission discovery
3. Role discovery
4. Trust relationships
5. Excessive permissions
6. Service identity exposure
7. Credential exposure
8. Application permissions
9. Identity attack paths
10. IAM risk assessment

Module 4: Credential and Token Attacks

1. Credential theft
2. API key abuse
3. Access token theft
4. Session hijacking concepts
5. Service principal abuse
6. Workload identity abuse
7. Privilege escalation
8. Persistence
9. Identity attack detection
10. Credential attack response

Module 5: Cloud Privilege Escalation

1. Privilege escalation concepts
2. IAM policy abuse
3. Role abuse
4. Permission boundaries
5. Cross-account access
6. Cross-tenant access
7. Administrative role abuse
8. Workload privilege escalation
9. Attack path analysis
10. Privilege escalation defense

Module 6: Identity Defense

1. Least privilege
2. Zero Trust
3. MFA
4. Conditional Access
5. Managed identities
6. Secret management
7. Privileged Identity Management
8. Access reviews
9. Identity governance
10. Identity hardening

Module 7: Detection and Response

1. Authentication monitoring
2. IAM activity
3. Privileged activity
4. CloudTrail
5. Azure Activity Logs
6. Identity Protection
7. SIEM integration
8. Threat hunting
9. Identity incident response
10. Identity detection engineering

Module 8: Practical Cloud Identity Attack and Defense

1. Identity attack surface assessment
2. IAM enumeration
3. Permission analysis
4. Credential attack investigation
5. Token investigation
6. Privilege escalation analysis
7. Identity monitoring
8. Defensive control implementation
9. Incident response
10. Cloud identity attack and defense case studies