--- title: "Azure Red Team Learning Path - Cybr" description: "Azure Red Team learning path with Hands-On Labs in real Microsoft Azure environments. Learn how to ethically enumerate, breach, and escalate privileges in Azure." url: https://cybr.com/learning-path/azure-red-team-learning-path/ --- # Azure Red Team Learning Path - Azure - Red Team 6 hands-on labs ## Path Overview Develop practical Microsoft Azure red teaming skills with our learning path. Every step is a hands-on lab in a real Azure environment. Start with the Azure portal and CLI, then enumerate an environment from a set of credentials, breach Azure through an exposed Blob Storage container, and escalate privileges through a misconfigured Key Vault. Finish by seeing your steps from the defender’s side in the Azure Activity Log. ## What You’ll Learn - Azure Fundamentals: tenants, subscriptions, resource groups, and roles - Azure Enumeration with the Azure CLI - Azure Management Plane vs. Data Plane Access - Initial Access through Exposed Blob Storage - Key Vault Privilege Escalation - How to Recommend Fixes for What You Find - How blue team investigations work ## Prerequisites - Basic security concepts (authentication, authorization, encryption, etc…) - Comfort running commands in a terminal No prior Azure experience is needed. The path starts with your first day inside the Azure portal. ## Content 6 items 1. ### Your First Day Inside the Azure Portal Hands-On Lab Your first day on the job as a Junior Cloud Analyst, you've been handed an Azure account and access to two resource groups without a whole lot of onboarding. Find your bearings, do the work, and figure out your permissions. View Content [Your First Day Inside the Azure Portal](https://cybr.com/hands-on-labs/lab/your-first-day-inside-the-azure-portal/) 2. ### Getting Started with the Azure CLI Hands-On Lab Learn the Azure CLI by investigating a missing update for a progress site. The deployment note did not reach the team, so nobody knows where the release evidence is stored or whether the update is ready to publish. View Content [Getting Started with the Azure CLI](https://cybr.com/hands-on-labs/lab/getting-started-with-the-azure-cli/) 3. ### Intro to Azure Enumeration Hands-On Lab You have credentials for a client's Azure environment, but no resource inventory. Where do you start? In this beginner-friendly lab, you'll use the Azure CLI to discover resources, investigate permissions, and test access to stored data... View Content [Intro to Azure Enumeration](https://cybr.com/hands-on-labs/lab/intro-to-azure-enumeration/) 4. ### Breaching Azure Through an Exposed Blob Storage Container Hands-On Lab What can an attacker do with an exposed Azure storage container? In this beginner-friendly red-team lab, you'll start with Northstar Analytics' website URL, investigate public deployment files, and uncover an application credential. Use it to access private reports and collect proof of the breach... View Content [Breaching Azure Through an Exposed Blob Storage Container](https://cybr.com/hands-on-labs/lab/breaching-azure-through-an-exposed-blob-storage-container/) 5. ### Azure Key Vault Privilege Escalation Hands-On Lab In this lab, you will enumerate an Azure environment to find a Key Vault using a legacy access-policy model, and leverage a management-plane permission to grant yourself access to a secret you shouldn't be able to see. Then, you'll use the recovered credential to read a restricted document and capture the flag... View Content [Azure Key Vault Privilege Escalation](https://cybr.com/hands-on-labs/lab/azure-key-vault-privilege-escalation/) 6. ### Investigate Unauthorized Changes in the Azure Activity Log Hands-On Lab Learn how to investigate an unapproved website change with the Azure CLI. Compare the site files, examine role-assignment events in the Azure Activity Log, and review access to the storage account to identify who could change the site... View Content [Investigate Unauthorized Changes in the Azure Activity Log](https://cybr.com/hands-on-labs/lab/investigate-unauthorized-changes-in-the-azure-activity-log/) [\+ these Hands-On Labs](https://cybr.com/hands-on-labs/?category=azure) ## Ready to advance your cloud security skills? Join thousands of security professionals who are building their skills with our practical cloud security training [Start Learning](https://cybr.com/auth/register)