Bishop Fox Cloud Penetration Testing Methodology
Overview of Bishop Fox’s methodology for cloud security reviews.
Improve your cloud security posture.
Bishop Fox’s cloud penetration testing methodology combines configuration review with cloud penetration testing to identify vulnerabilities in cloud environments, such as Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure.
These assessments are meant to simulate the threat of someone with access to your cloud environment, whether that is a compromised user, a compromised application, or a similar use case. The assessments are time boxed and focus on demonstrating the real-world impact of misconfigurations. To accomplish this, the team attempts to achieve specific engagement objectives, such as obtaining privileged cloud credentials, gaining control over key services, or acquiring sensitive business data.
Download the complete cloud penetration testing methodology document to understand what to expect from your engagement, including an overview of the assessment phases:
- Pre-assessment
- Discovery and Cloud Penetration Testing
- Analysis and Reporting