Tag Archives: abuse Azure agent

Laterally move by abusing Log Analytics Agent and Automation Hybrid worker

Azure Automation Hybrid worker is used to manage Azure resources in local environment where compliant connectivity is needed. Normally a hybrid worker needs a certificate installed on it so it can be authorized by Azure AD before it can perform … Continue reading

Posted in Monitoring & Detection, Security Operation | Tagged , | 1 Comment