Google Cloud Hacking Red Team Perspective!

Google cloud hacking or pentesting is very different to other popular cloud service providers like aws or azure. In this episode we had Shannon McHale (Mandiant now Google Cloud) to talk about how she approaches pentesting a google cloud environment and how you can too. Questions asked: 00:00 Introduction 03:38 A bit about Shannon McHale 05:31 What is Red Teaming? 06:42 Red Teaming in the Cloud 07:50 Methodology behind Red Teaming 09:32 Pentesting in Goole Cloud 10:28 Low hanging fruits in Google Cloud 14:36 GCP storage 16:09 Red Team Assessment in Google Cloud 17:08 The importance of Metadata 18:17 Recommendations for Blue Teamers 22:03 How to get started in Red Teaming? 26:06 Tools or Research that stood out for Shannon 27:42 GCP Resources that can be exposed 29:15 Resources to learn about Cloud Red Teaming 30:37 The Fun Questions -------------------------------------------------------------------------------- 📱Cloud Security Podcast Social Media📱 _____________________________________ Twitter:   / cloudsecpod   Facebook:   / cloudsecuritypodcast   LinkedIn:   / cloud-security-podcast   Website: https://cloudsecuritypodcast.tv/ #cloudsecurity #gcp #redteaming