as the Kansas City squad takes down the Titans 20 to 17 and overtime, I thought the entire game the Chiefs were gonna lose this one. And just when we thought that we have seen everything imaginable out of one single player named Patrick Mahomes, every ridiculous thing you could possibly do on a football field, he keeps somehow finding ways to surprise me. He did it himself, okay? We've seen him lead a miraculous comeback before where he did it last night with over 500 yards of offense by himself. 444 through the air, another 63 on the ground including of course the game tying touchdown run and then what was just another remarkable comeback, you can't just heap it on the pile of those that he has because this one is special as this one is showing us that he can do it without Tyreek. And I've already said he doesn't need Tyreek, he doesn't need him this year but in a lot of those comebacks on that huge pile that has accumulated for Patrick Mahomes and company, it usually is Tyreek Hill coming and making some big plays. Oh, they don't have him, nobody will be there to make that play and they didn't need him, they crushed it and he crushed it specifically. We're not just gonna give him credit of course because it's beyond Mahomes and the offense, it's the defense that deserves some lap and Adams love today, check this out. The offense was struggling to get going, Casey's defense kept him in it. They were shredded by Derek Henry and Malik Willis in the first two quarters, what did Spags do? I don't know, win in that locker room, Ada Cheeseburger with Andy Reed, they came out and they allowed just 22 total yards in the second half, how about that? Buying Mahomes and company, their chance to get it together and get back in the game. That is as good as second half performance as you will see out of a defense, Spags and company, we see you. And of course, I'm very interested in the Malik Willis of it all. So credit to the Titans and Vrabel giving this squad all they could handle. The defense spectacular most of the game and I do think that Malik sort of showed some signs of growth, especially in the first half. Ultimately, the Chiefs team too much to handle with Mahomes under center and the defense playing the way that it turned out playing. So Kansas City now moves to six and two, I believe, and that number one seed in the AFC still very much back in play for them after Buffalo's loss yesterday afternoon. Okay, what is happening in studio right now? There's a lot of movement. There's, what is there, are we okay? Is there some imminent danger I mean? Is it has to do with the rain? Are we, oh, is the lighting? What is it? Okay, what are you telling me? Something is happening. I need to hear from you guys at Up and Atom Show. And I'm smiling. Listen, I like to smile. I want to have a good time. And so I'm done talking about the Packers because I like having a good time. And here's my takeaways from yesterday's action 59. A loss to the Lions. I knew they were gonna lose going into it. I like to be positive. I like to swim in that side of the pool. I like to, you know, I like the party of it all. I like to highlight the good things teams are doing rather than spend time a week after week talking about all of the Packers missteps, their mistakes that they've made up to this point. Most self-inflicted, especially when they're not going to listen to anyone by trying to make it better. Anyway, you, oh, I don't wanna get into this. You have five plays inside the five yard line early. Why would you give the ball to Aaron Jones? Why would you do that? He's only the best weapon you have on offense. Let's just throw three interceptions in the end zone instead. And now Jones hurt, Dobbs hurt, Watson and Gary. Gary's hurt bad. And I just can't do it anymore. And the schedule makes it easy to make this statement that I'm making because it's not fun. Cowboys, Wolf, Titans, Wolf, Eagles, Wolf Packers. You are three and six, Wolf. And listen, when I watched this game yesterday, I thought I put myself in Odell Beckham Junior's shoes who is Bella the ball, I could probably go wherever he wants. The schedule, the record, I think there was a good chance because Aaron Rodgers is as good of a player, a prolific player, best in the game, two-time MVP, I think very charming, can get on the phone and talk to Odell and get him interested in coming there. I don't know, I think it's too late. I think Odell now, he might answer the phone and listen, but I do not think it's anywhere near the top of the pecking order and favorable landing destinations for Odell's services. It's too late. And there was so much yesterday. We tried to get this guy out of that front office in Green Bay and we were in the mix for Chase Claypool. Those are fails. Those are fails all around. And then there's the, how do we handle this selfishly on this show? Because we love to be positive. And we only have 48 minutes every day to divvy up the focus on storylines. That we want to talk about ones. We need to talk about ones that make an impact. And I just think I'm done with the packers right now. And there's more useful discussions. My words are not lost on things like this. Cause I said, run the ball. I said, give Aaron every weapon he wants. So here's more impactful discussion. I could sit here and talk about the detailed meaning of daylight savings time, which does anybody even know what happens anymore?  Like that could, if we went into that on the show, we could help someone out there. Yeah. Every single shot from producer Brian's round of golf is speaking. Humble brag. How'd it go? Okay. Well, see, I don't really want to hear about him. My kidney stone, that could be more useful than me sitting here talking about the packers and what they needed to do, what they need to do, and whether or not they could turn around. How about describing social media to my great aunt Ethel? And tick tock, no, no Ethel. It's not candy. Let me explain tick tock to you. How about the process of rebuilding a carburetor? Was I used to call a carburetor? That's literally no way. No chance that's how you spell carburetor, really? Oh, I'd be knocked out of round two of the spelling bee for sure on a lawn mower. Great. Yeah, great. I once changed a water pump in a 1996 Nissan Ultima. I could do that. I could tell you things. I'm Tim, the toolman, Taylor, the binford 5000. How about how a bill becomes law in the United States government? Very topical, very on trend, very necessary for tomorrow. But yeah, it's more useful to talk about every single species of bird in existence on this planet than it is right now to talk about the packers, how they repair it, what they do. Now there's injuries. Now there's the schedule. And now I'm looking at this squad, and I want to be wrong. And I hope you prove you're wrong, of course. That's why I'm doing this. But you're on your way to a top 10 pick next year where you're likely to choose another cornerback. And this vein in my forehead will pour true like a blink and does on the penny. It'll just pop right out and be out there for the rest of time with this packer squad. It could change. I love Green Bay, wanted to work out, want to live in the positive. I'd like to hear from you guys out there watching. At Up in Adams Show, am I being too harsh? I don't think anyone's going to say I'm being too harsh on this team because it's not injuries. It's not, you know, it's decisions that were made and most of it self-inflicted.  It's just a mess. It's a mess. All right. Onto more positive things. I like this one. To a tongue of Iloa, officially needs to move to the front and center of the MVP conversation. Not set it to a rectum. Over 300 yards, three touchdowns. The Dolphins won yesterday, 35-32. When at Chicago, Chicago gave them hell. All the Co-Jessen fields looked awesome, but the Dolphins are now undefeated. Get this, six a no when he starts and finishes the game and are now just a half game back of Buffalo for the AFC East lead. And his numbers have been zany, absurd. He's leading the NFL in passer rating in yards per attempt this season. Which showcases not only how efficient this quarterback is, which is what we always thought he could be, but also his ability to do something that everyone thought that he couldn't in the big leagues, hit those deep balls. Everybody said, oh, he can't do it. I've not seen it.  And I think it was one of my bold predictions heading into the season the day the show started that Toa is going to shut people up. And he's also beaten the favorite for MVP. That's a great thing in his argument here. If you're making the case for Toa, he beat Josh head to head. And I know that the arguments, because that's what you do when you say something like this, you have to say, well, what are people gonna come at you with? And they're gonna say, how can you give him the MVP? He missed games. That's exactly why you give him the MVP or why he has to be in a conversation. Because the Dolphins' miserable performances were when he was out with that concussion and that only serves to make the case that much stronger. It has proved how valuable he is, how important he is to said team. It isn't just Mike McDaniel. You can't say it's the speed. You can't say it's Wally. You can't say it's Tike Reed. He is the point guard that is making it all work. So there's a lot of scenes left. I'm not saying he is the MVP, but I'm saying that he needs to be in the mix and thought of that way. Of course, Marissa, I have your computer and I need you to log in. Yeah, I think it's time for critics to sort of lay off him and swallow their preconceived notions about it and admit that maybe they were wrong about Toa and he's having such a special year. And speaking of Toa, thank you, Marissa, you're beautiful and I love you and I'm sorry about the Astros winning. No one wanted the Astros to win. No one except for Kate Upton who Kate Upton like all for supporting your man, but like read the room. There's a reason people don't like the Astros to say we don't know what are we doing? Anyway, don't put that on Twitter. I don't need that smoke this morning. And speaking of Toa, I want to get into the AFC East which has gotten very interesting Sunday. I said it before, dolphins are half came back above below. After beating the bills yesterday, so are the jets. How about, that's amazing. And then look, the daylight savings time happens and everyone's slipping their clocks back and it's raining and I'm cold and what happened New England's performing? Something happened November, that Bill Belichick gets them grinding. They're sitting there at five and four up there with the Patriots. The clocks get turned back, it happens and this coach, say what you want about him, grinds out wins, refuses to give it away. The division, the whole point of this, the division is wide open thanks to the jets and this has been so fun to watch. The first half of the season is over and the bills, of course, overwhelming favor, it's probably gonna win it all. It probably will take the East as, it should be, it should have been easier though and it's important to know that they are 0 and 2 in the division. Did you know that Brian? Okay, okay. And I think a lot of people are penciling them in to be the number one seed and go to the Super Bowl. A lot of work to be done though, here for those Buffalo Bills. But however, it shakes out so fun. So fun to watch these four teams. They've been sitting with winning records. Nobody thought that about the AFCE, so it's all good times.


Everybody Matt here for late and sports cards rip in 2022 leaf metal pop century 12 box case break number three random hit style 24 spots in the break there be 48 hits in the case So each spot will get two random hits I'll open the case show all the hits Sean's gonna enter the hits in and then we will do the random at the end Good luck everybody. Let's have some fun. Always love ripping this stuff. I Want to see a crazy ticket I think bullet John London earlier. Hey, what's up Tony? Thank you. Appreciate it. Yeah, right first up is Krista Allen That is 34 of 50 Next one's cool cut auto That is Gabrielle Union Very cool. I'm so mad that I don't have an eye in my first name. So totally not my like that. This is Auto Lana wood that is two of four nice Just recently passed away that is auto James con three of seven this is Cracked ice Tom Arnold auto that is six of six Nice Tom Arnold. Yeah, this one this lady Louise Fletcher auto Two of 25, I know she was just acting but I have a like a personal problem with her because of how good she was in that role There's Standards for star studded swatches Sean Penn. Oh, this next one's awesome. Look at this dual auto Charlie Sheen and Martin Sheen that is two of four They should have a triple auto with these two and Amelia West of us awesome card Good start here Hard had a nice sheen to it Grammar will not beat me in Come with some straight grammar first. That is Henry Winkler Growing up graphs. That's awesome four of seven Nice Jerry nice Linda Blair from the Exorcist 23 of 25 is Dean Kane auto 17 of 45 Here's your boy Joe Exotic orange two of three nice Joe Exotic Tiger King colors there, too Yeah, nice Joe Exotic, all right, let me see how many we have left for the next one Seven yeah, you might be right Kitch. All right, we're gonna retop load this one that top loader is a little messed up I don't want to damage the card that is cut auto newt Gingrich nice newt. There he is Jerry Mathers Growing up graphs and gold that is one of one It's a Marshall's Jerry Mathers. He was Bieber, right? Yeah. Yeah nice one of one and From the facts of life that is Todd Bridges Auto five of six Have a yeah with the thicker cards I think we need to start putting a sticker over them and this is Adam driver green auto That is three of six Nice Kylo Ren speaking of Kylo Ren. We're gonna be doing some Star Wars finest The random Mini box breaks tomorrow to kick off our breaks here from the shop We have two of those scheduled. There he is again. That is Jerry Mathers auto eight of twelve and Here's the guy that set unrealistic expectations of what guys are supposed to be like with his roles in the 80s That is John Cusack green auto That is two of two This is cool star studded swatches Charlton Heston. It's like a sweater relic or a scarf. I Don't know. I've never actually owned a scarf. I don't think I'll look at this one That is Christina Applegate auto pink. That is two of eight. Nice Christina Applegate Charlton Austin carpet This is Nikki Blonsky auto. I don't Recognize her seven of seven. This is wave auto Lindsey Wagner 25 of 35 Okay In the movie version of hairspray This is concert ticket stub Alabama, I would actually like to see them in concert. This is auto Jeffrey Dean Morgan orange Two of five walking dead, right? He's walking dead. Correct. I've never seen the walking dead Okay, yeah, I watched part of the first episode Of the walking dead and there was a gross part and I was like, nah People like you have to watch I really don't Look at this one.  That is two of two He'll inspire you and the karate kid.  Yeah nice Ralph Machio and Vinyl signs auto D. Snyder Twisted sister that is awesome eight of 15 and his star studded watches James Cagney seven of 10 nice James Cagney and vinyl signs wave auto Paula Abdul. What is the best Paula Abdul song of all time? at six of 15 She was like legit pop too. She didn't have any ballads or anything on her albums straight up I don't know Opposites attract man. I Just it was a magical pairing for an mc. Scat cat This is auto Walter Koenig Orange that is five of six Oh, no kidding. I have that on I have the outsiders on dvd. Yeah straight ups pretty good Knocked out is underrated also by Paula Abdul This is auto Stephanie Powers 10 of 10 star studded swatches Samuel L Jackson The dancing and straight up is second to none. Oh, yeah Megan Fox That's my arrow right there One of two nice low numbered Megan Fox auto back in my era. It was Samantha Fox. All right next up We have five to go now in the next break That is blue wave auto Stacy dash Three of eight. Yeah, that would be awesome Bradley This is growing up graphs jud nelson That's one of five Have you ever seen the breakfast club? Yeah. Okay. Yeah, he also played the sheriff in J. N. Sound about strike back Star studded swatches britney spears and look at this one auto blue christie brinkley That is two of 15 Awesome hit to be fair shame to be fair. I was like eight In fourth grade when transformers came out with Megan Fox So like me and all my friends when we saw we were like Humana, Humana, Humana, Humana, Humana looking at Megan Fox All right Yeah, this is awesome. That is growing up graphs. How Lyndon I don't know who how Lyndon is off the top of my head nine of 20 That is growing up graphs Paris Thamon 41 of 50 that is concert ticket stub james taylor Awesome. Oh barney miller. Barney miller. Yeah, are we missing a hit? It's just an empty top loader That is john sena auto two of two Very nice I had to hold it in the right light. I couldn't see him at first Banana Two boxes to go Yeah, I think you have to have a special top loader to be able to see that Sam's probably never seen they live Nice billy vera vinyl signs auto that is one of 15 He sings at this moment, right? This is eric astrada auto five of five Great camion. My name is eril Fantastic That is him. That's what I thought And look at this one. This is awesome Ticket stub. Let me push it in a little bit ticket stub garth brooks April 17 1997 Very cool. Yeah Dude, this stuff is awesome and billy crystal auto That is five of seven awesome Stop that's here I graduated Yeah, I know shan has a few years on me. So we're covering quite a bit of the uh historical spectrum probably not much just There's tom sizemore auto three of 15 and mystery Cut signature I am really curious to find out who that oh really that's awesome. I love that name son of nightbot This is wave auto george Shakira's 33 of 50 you slept for two hours on the couch today There you go. You're getting there now Yep No clue where I was And last hit of the case is amelia clark That is two out of three I'm gonna read off the entire random results in three or fewer breaths I'm just kidding. I would pass out if I try it all right Give me just a second here and uh We'll do this random. Do we still have spots left for the next one? Second part of the question if so how? No, I think it's gone. Yep. We are sold out just like I said Yep. All right. See you Jerry. So 48 48 we are good to go Yes, good job Sean. Thank you. That is not easy to do Yeah All right, here we go. So each name has been entered Twice we doubled the list here All right, let's do it roll the dice randomize the names and then the heads. We're gonna randomize eight times That is one two three four five six seven and eight Cory f Down to jonathan m Eight times on the hits one two three four five six seven and eight charlton heston Down to henry winkler to seven All right, let me get these copied and pasted over and I will read them off I'll fix the formatting here As soon as I get this pasted over. All right, we have Cory f charlton heston Relic Bradley c christie brinkley to 15 shame d stanley all jackson relic Ozzie r Stacey dash to eight william d adam driver to six Sean t amelia clark two or three and the jerry madder's one of one Sarah b tom arnold to six jonathan m billy vera to 15 matt o james cagney to 10 relic Jessica g christa allen to 50 paul d christina applegate to eight Brett c john sena two of two Yeah, I'm gonna read the whole thing Jessica g tom sizemore to 15 john don g alabama ticket stub joseph p joe exotic williams e howl linden martin z walter konig peter and paul abdull brian me e todd bridges sarah b gabrile union martin z louise fletcher bradley c james taylor melissa r britney swer britney spears Uh, williams c eric astrada matt o got the martin sheen and charlie sheen dual auto that is awesome uh, ozzie r Paris them and david o jerry madder's uh to 12 joseph p megan fox one of two william d george chacarist 50 brian mell ralf macho uh joe s james con andrew h billy crystal shame d lana wood brian me e got the garth brooks ticket stub melissa r jeff redean morgan five quarry f dean kane uh david o linda blare peter m lindsey wagner jessica g got the stefany powers to 10 and the jud nelson to five uh paul d d uh d snider Hang on a second now you're you're good it's one typo and all that it's pretty impressive Andrew h knickey blonsky to seven don g shon pin relic brent c john qsac two joe s got the mystery redemption brian mell newt gingrich and jonathan m henry winkler all right that'll do it for the break thank you everybody appreciate it case four is coming up next


Yeah, we on Boss Talk 101. Check it, check it, check it. It's a unique hustle. It's your boy, E.C.O. And I'm here with the lovely official. Mr. Mako, what's going on? None of them dare walk on. Say, man, look, man, we got exclusive right here, man. He niggas in trouble, man. Hey, man, I done pulled up on the block, man, and nigga really feeling the shelf right now. I got a quick trip in there, man. What's going on? Say, man, what's going on with you, man? Life. What was it? The first thing that stuck out to you for is, the first song that you really knew, like, I'm doing my thing. The numbers went up, or just the impact was right. I got a song, right? Mm-hmm. It's called We Bulked, Me and Fresh. OK. We took it in the club. I want to say for like three weeks. The one song got us to meet with every label. But they all said the same thing, so I never put the song back out until I get big. When going back to bankroll fresh, when you and him were working together, because y'all was working together a lot, once he passed, how did that kind of deal with your career? How did that push things one way or the other? I want to stop. I figured that. I want to stop with them.  So therefore, it's a real life thing, not just an initial thing like we've been together since we were like three, four. Yeah.  So when I got the call, I wasn't even a future show. OK. Purple Rain, 2 in Atlanta, that three, four. And then I was like, I got the call. He got Grace. Who else be? GZ, but GZ ain't here, or Tio? I can call Tio. OK. That's a mentor to me. Really? You call him, and we can real estate tomorrow. And we know it, that's crazy. If he in town, I can call Tio. I'm going to take something. What do you think would be a good idea? I'm going to take Tio. No, I like Tio, a little Tio. Tio's one of the ones, like he's going to tell you the truth, like that's my, that's one of the real mentors. I can say, if I call Tipper, he missed the call, he's going to call back. I like one of the people. If he got his phone in his hand, he going to pick up right then, hey, quit you with me. You need me for something? Well, yeah, I need to highlight you about something. I've been in the studio at this time.  He ain't, or come by yourself type. He like, who you with? Well, yeah, don't, don't bring a thousand people. You know, I don't got my kids here. If you got his kids, they going to tell you, if he, if he by himself, Tipper and Lumbie Ken, you come with 2,000 people, longer than respectable. Oh, really? Long than respectable, he was a reporter. We've been in a few worlds together. He's always been a respectable person, because I've met him so many times. He helped me get through a lot of, a lot of that, a lot of that tough time. Like I call and talk to him, you know, he lost for lunch. He lost a couple of people on that road. And I know he probably got blamed for a couple of things. And I always just ask him how he get through it. And he always gave me real answers. Yeah, we on Boss Talk 101.


Welcome to Extracting All the Azure Passwords. I'm Carl Fawson. If we're watching this right now, it means that I've either had some catastrophic issues with my laptop and wasn't able to join the live stream to do this presentation live, but all of the information and slides will be here and we'll still be able to do the presentation and I will join for the Q&A at the end. So please save any of your questions for the questions section that we have at the end, but a little bit of background on myself here. I'm a practice director at a company called NetSpy. I currently lead up our Pacific Northwest team out of Portland, Oregon. Along with that, I lead up our cloud pentesting services where I primarily focus on Azure pentesting as this whole talk's gonna be about Azure and how we can get passwords from it. Kind of makes sense. I'd spend a lot of time doing research there, but I also dabble in other cloud platforms that are out there as well. Spent a little bit of time in AWS, GCP, handful of other cloud providers out there. So I consider myself a bit of a cloud enthusiast in my spare time. Also a cloud enthusiast as a private pilot. I like to fly and try to avoid the clouds myself, but spent some time up in the sky as well. The last thing on my list here is Author. This is a recent edition for me over the last year or so here. I've been co-authoring the Penetration Testing Azure for Ethical Hackers book with David Okioti. We will have that book out in mid-October with packed publishing, but if anybody's interested in pre-ordering, it is out on Amazon right now. So feel free to check it out there. Otherwise you can find me on the Netspy GitHub where we'll be talking about some tools that I've released through the Netspy GitHub. And I blog on the Netspy blog. You can find me on Twitter where I'm usually talking about things that I've contributed to the Netspy blog or to the GitHub. And that's at kfossin for Twitter. So this is a cloud village talk. So I would hope that most folks here understand what Azure is, but for those that are not as familiar with it, it's the cloud provider from Microsoft. And from I guess my perspective and Netspy's perspective, we're seeing lots of our clients move to the Azure cloud for a number of different reasons. The primary driver really being Office 365 services, the integration between on-premise active directory, where lots of clients that we work with are currently in and moving over to Azure active directory, which we'll talk about the structure of that in a few slides here. And then utilizing some of these services that we'll talk about in the talk here to either replicate existing services that they have on an on-premise environment or build cloud native up in Azure as a new application or service that they wanna have up in the cloud. So an important thing that we wanna think about here is that at certain IAM, RBAC role levels within an Azure tenant, be it at Azure Active Directory to subscription, there are passwords in multiple different areas. So typically with contributor rights, we have multiple different services within the Azure subscription that we're able to pull out credentials from and we'll be talking about those different services today. So before we get too far into the services themselves here, just wanna make sure everybody's using kind of the same terminology and understanding the structure of an Azure tenant. So from an Azure Active Directory tenant standpoint, this is kind of the top of the organization for an Azure environment. So the tenant is really that core identity provider within Azure. So for role-based access control and identity and access management, the identities that are stored in Azure Active Directory will have roles applied and those roles allow for access to different subscriptions, services, tenant-level roles that will be applied as well. And in order to apply a role, you have to have a security principle. So principles are made up of a number of different identities within Azure Active Directory. These could be users and or guest users, primary users being users that would either be part of the synced Active Directory environment or just direct on Microsoft managed accounts. And those are accounts that only live in Azure Active Directory. They're not synced down with an AD sync down to an on-premise domain controller. There's some subtle differences between the two, but in general, they're users, they're in Azure Active Directory. We can apply roles to them. Likewise with guest users, those are users that are part of a different tenant for the core of their identity. Those can be added to your tenant as a guest user and provided access to different services through application roles or custom roles, anything like that. For managed identities, we have system assigned and user assigned where system assigned is really more of the resource itself having an identity tied to it versus a user assigned identity, which is more of a subscription level identity that can then be applied to individual resources. They're kind of inverses of each other, but the core of it is you can assign a specific identity to a service. So something like a virtual machine. If we want that virtual machine to be able to have rights within either Azure Active Directory or the subscription to access data or make changes, we would assign an identity to that virtual machine that VM would get the token for that identity and then be able to authenticate to Azure AD or to the subscription itself and access data or make changes. So the last one on here is service principles. These are more of application accounts within an Active Directory tenant. You might be familiar with app registrations within the Azure Active Directory tenant. These are kind of more service type credentials that are utilized by their applications or services as a long-term or potentially long-term credential with a static certificate or password that you could rotate or change over. Typically these are just used for services that are not used for daily interaction with the user and utilized for individual services. So to reiterate with all of these things, these security principles are assigned roles and those roles assign access within the Azure Active Directory tenant. So going one step down here from the tenant down to the individual subscriptions. Subscriptions can be housed within management groups. Management groups can have child management groups. There's subscriptions underneath that. Within the subscription itself, there's resource groups and resources and the application of the roles that we're gonna talk about here can be applied at any of those levels that we see down here on the bottom. So typically in a normal subscription, I would say for the most part, we're seeing roles that are applied at the subscription level or the management group level. If somebody's really, really interested in setting our back and IAM controls around their environment, they'll scope things all the way down to individual resources. But from a practical day-to-day perspective, we're usually just seeing things scope through the subscription or management group for specific users that are either cloud engineers or developers within that subscription or management group that we're working with. So primary roles that we're working with here are owner, contributor, and reader. From our perspective as a pentester, we're often granted reader level access to a subscription as it doesn't allow us to make any changes in the subscription, which could potentially cause an issue, modify existing resources, anything like that. So oftentimes we're initially granted reader level access and try to escalate up to say owner of the subscription or up into Azure Active Directory. So contributors on the subscription allow the user to make changes to the resources themselves in the subscription. Contributor is really what we're seeing for the day-to-day users across the board, people like developers or cloud engineers that are making changes in the environment. Typically it's a subscription level contributor permission that's set so that that user can access everything that is in that subscription. And the only difference between owner and contributor is that owners are allowed to make role assignments within that subscription. So if I'm an owner in the subscription and want to assign another user contributor or reader or another role within that subscription, I have rights to do that. Now roles can be applied at multiple different levels. We talked about the kind of different subscription management group levels. There's also Azure Active Directory tenant level roles that we're not really going to talk about today because they don't necessarily apply to the subscriptions. That's probably a whole other talk. But for the subscription level roles that are applied typically service or application-specific roles that we'll see, we'll talk about a couple of ones that are important for us to use for gathering passwords in a couple of slides here. So for all of the examples that we're going to talk about in the presentation today, just assume that we have contributor on the subscription that we're working with here. Again, typically developers and engineers are going to have this role and it's a very common role that we're going to work with in a subscription. Now some folks are going to say, oh, that's basically admin and you can do everything there. Yeah, it's kind of true. I would say it's on par with say a local admin on a workstation in a traditional Active Directory environment. You've got some power with the specific environment that you're in, say the subscription, but overall you don't have tenant level management. You're not global admin on the Azure Active Directory tenant. You don't have rights to add or remove users or anything like that. It's really just, yeah, I can create a virtual machine or a Key Vault or anything like that. And that's typically what we're seeing in a lot of subscriptions that we work with. Alternatively, there are other roles that you might gain access to during the part of a pen test. So look out for things like website contributor, storage account contributor. We're going to have a very specific log analytics contributor example at the end of the presentation here. But there's multiple different service specific roles that you might be able to make use of to gather credentials from an Azure subscription and we'll cover how we can do that in a minute. So how do we manually access individual credentials? So let's say that we have rights to read credentials for a specific service that we're utilizing in an Azure subscription. Most of the time I would recommend just using the Azure portal. You probably have other options via the CLI or PowerShell to just manually grab individual keys or credentials for kind of one-off collection. We'll go through those for each of the different subscriptions and sorry not subscriptions, resources and services. And for each of those services we'll talk about manual collection and then how we would automate that within GetAzPasswords, which we'll talk about next. So from a manual collection perspective, this is fine if you only have just kind of one-off access to the portal or the CLI or an active session. But from a practical pen tester's perspective we want something that can automate all of this collection. So we wrote GetAzPasswords to automate the collection of passwords out of an Azure subscription. It really wraps the AZ PowerShell functions to automate that collection and just actively and passively gather passwords from different services within a subscription. More the active stuff we'll talk about with things like automation accounts where we have to upload a malicious run book but the passive configuration gathering is usually just one or two lines of PowerShell to say grab a publishing profile from App Services. So if you're interested in microburst we have a number of different functions within the tool set. I've got the link out to the NetSpy GitHub here for microburst, we've talked about all the different functions some other time but there's a lot of different tools within the tool set for enumeration and attacking different services that are in Azure subscriptions. So the first of these services that we'll talk about today is Key Vaults. Now you may be thinking, okay, let's talk about passwords. Key Vaults store passwords, this makes sense. Service is pretty straightforward. It stores credentials and it's used in an Azure subscription to hold secrets, keys, certificates, anything that you would want to protect and keep in a password vault or a Key Vault. So it's a pretty simple service. Manually dumping credentials from this service is also pretty straightforward. You can go into the keys and secrets if you have access to read those and then just manually show the secret value or download a backup copy of the certificate. The portal actually makes it pretty easy to do but this also requires you to have rights to read and list any of those keys or secrets in the access policy. So you can see in the bottom right-hand corner here the add access policy button here. With the Key Vaults, there are individual access policies for the vaults where you can configure individual security principles and set permissions for the Key Vault via the access policy. So instead of just saying, hey, all of the contributors have access to list and read the credentials are stored in the Key Vault, there's an extra step within Azure Key Vaults where you have to add an access policy in order to access those keys and secrets. Just by default, when you create a Key Vault, it's not one of those, oh, hey, everybody has that, it's tied into Azure RBAC. It's one of those things where you have to add the access policy for that. During a PEN test, we may want to modify that access policy temporarily so that we can access the credentials that are in that vault and we definitely want to revert those changes after we're done with that. That is something that you can do. We have functions, and we'll talk about that on the next slide here, that allow you to do that. But it's not a huge impact. It is something that could potentially be logged in the subscription logs themselves and potentially noted as malicious activity. So something to watch out for there. Additionally, access can be restricted by source IP and network, so things like private endpoint connections would restrict where you can actually access the Key Vault from. This is something that we do not have automation built in to get easy passwords for. It's not something that I'd recommend changing something from a private endpoint to a public endpoint is definitely a major state change. I would not recommend doing that. But it may be something to keep in mind as you're trying to get credentials out of those Key Vaults. So from an automation perspective, it's pretty straightforward. With GetAzPasswords, we're utilizing the GetAzKeyVault function from AZ PowerShell to list out all of the Key Vaults. Then for each vault, we want to see what that access policy is up front. If we need to modify it to add, get and list permissions for our user, we can do that. We'll just make a backup of the existing access policies that we can restore to at the very end and then modify the access policy to give ourselves access. Then we get the keys and secrets, return those out to the user through the GetAzPasswords PowerShell function and then return everything back to its original state after we're done. Pretty straightforward, definitely very handy for dumping out Key Vault contents. We can also export certificates to individual files as well. So if you want to get a PFX file for a certificate, GetAzPasswords supports that as well. So the next service that we'll cover is App Services. For those that are not familiar with App Services, at its core, it's really application services that you can use to host web applications and APIs within Azure. So in general, what we're seeing App Services used for primarily function, logic apps, API endpoints and more of your traditional application servers. So from a more traditional on-premise environment, let's say you've got an IAS server and want to ship all of your ASP code up to the cloud, you can make use of Azure App Services to basically be your web server and run all of your application code up in Azure. Super handy from a pentest perspective, we are potentially getting into App Service applications for traditional web application vulnerabilities, some of the most impactful ones being code execution, which is extremely impactful in the first place anyways, regardless of where the application's being hosted. But from a cloud perspective, it potentially allows us to pivot within the cloud environment. So for the App Services themselves, there's frequently passwords stored in configuration files, potentially hard-coded in application configurations or the application files themselves. There's connection strings are associated with the App Service, which we'll see in a moment here. Additionally, function app files were frequently seen configurations there. One of the kind of common things that we run into from a reader perspective is being able to read those function app files and parse it out any hard-coded credentials there. I've quite frequently seen service principle credentials stored there, and we can pull those out to get access to whatever that service principle needs, you know, say from a Key Vault perspective, anything like that. So those are definitely handy. And then there's also App Services configuration service, which can then apply down some of those configurations onto multiple app services and kind of set standard deployments, things like that. That's also an interesting service to dive into. So manually dumping these credentials from an app service application, we can just navigate to the application in the portal, go over to the get publish profile link over on the top right there, and get the publish settings file that we can see here. Now I've redacted all of our user passwords here, but you can see all of the user names are dollar sign Netspy. That's for the Netspy app service application. And, you know, all of the creds here are a bit of an eye chart to look at here, but we've got web credentials, we've got FTP credentials, we've got a number of different credentials that we might be able to utilize as an attacker. So these credentials that we're gonna get out of the publish profile would allow us to access the application from an FTP perspective, which would give us access to application code any configuration files that might be living in the web directory and potentially pull sensitive information out of there, much less getting access to the source code, which could be useful in some way. In addition to that, we have access to web management credentials that would allow us to authenticate to this Kudu environment that we have up on the screen here. Now, typically you would access that through the Azure portal. If you actually go to the SCM link, so in this case we see netspy.scm.azurewebsites.net. If you specify forward slash basic auth on the end of that, it's kind of a neat workaround trick so that you can use those credentials that we identified in that publish profile to access the Kudu interface here. Now, this interface is super handy for just getting access to the application itself. The files that are in there, we can see debug console, process explorer, you can get a PowerShell shell, so you can run commands on the app service itself, and super handy. So from a persistence perspective, I would recommend pulling down published profiles for any apps that you're able to compromise and use that for persistence to keep a presence within that app services application. Finally, the last thing in here is connection string. So by default, if you set a standard connection string for the application to use at the app services resource level, that connection string also gets pulled down with that published profile. So one of the things I want to touch on here if we're able to use that Kudu interface is potentially using app services managed identities. So an app service application that has a managed identity tied to it to access key vaults. So our potential scenario here is let's say we're doing an application pen test against an app services application. We get command execution for some way to pull a token out of the application, and then utilizing that token, we can potentially collect key vault contents as that managed identity. So by hitting the metadata service for that app services application, we're able to pull back a token. We have to get token scoped for the management level and the key vault level. We'll talk about some specifics later here as we go through some of the other content here, but basically you scope out tokens for this and you can use the get AZ key vault keys rest or secrets rest to use the rest APIs to collect those out of the application. So it is super handy because we do frequently see app services being configured with managed identities. Those identities have rights in an access policy and a key vault and key vaults potentially storing sensitive information for the application. So again, this is pretty simple to dump all of this information. We just list out all of the available app services apps and then for each app, we just pull down the publishing profile. We then parse the profiles for any credentials and return those back to the users for get AZ passwords. It's pretty simple. So next up is automation accounts. It's one of my personal favorites within Azure here, but for automation accounts, you've got a service that basically runs serverless code for you to automate management and other certain tasks that you would want to handle within an Azure subscription. We're seeing automation accounts do all sorts of different things in subscriptions that we're dealing with, but primarily we see things like virtual machines being spun up or spun down in the Azure environment for things like cost management or for update management applying updates to any machines that need updates in that Azure virtual machine infrastructure. So there's a lot of other things that you can integrate automation accounts to do, but in order to utilize the automation accounts to do things in the subscription, frequently we'll run into credentials that are tied to the automation account itself. So these can either be clear text credentials that end up hard coded in a run book. This is bad, not a good practice, but we do frequently run into it. As a reader, we can potentially read those run books with read-only access and get those credentials out of there. Platform level stored credentials, these are stored credentials that are in the automation account itself at the cloud platform level. There's a section called credentials where you can store credentials in the automation account and then run as accounts that are tied to the automation account itself. So as an owner of a subscription, we can set an app registration that is tied to the automation account itself. Now, this application or I guess service principle is then used as a run as account and that authenticates within the Azure Run Book itself. With a certificate, we can actually access and extract that credential using a run book and we'll show how we can do that in just a minute here. That's super handy as the run as accounts are typically set up as a contributor or at least as a default configuration, the run as account is a contributor on the subscription. And then from a Key Vaults perspective, if any Key Vaults are being called from the automation account, typically being used with run as accounts, we can potentially use that run as account to access the Key Vaults. We'll talk about that on the side here. So doing the password dumping manually here, we can utilize run books themselves. We can view the run books very simply by hitting the view button and reviewing the source for the run books. Very, very simple here. Then actually pulling out these stored credentials, we have to get a little bit more complicated with our PowerShell code here. So we can see in the screenshot here that we have two different sections for pulling out credentials. The top one is for these stored credentials at the platform level. The bottom is for the run as certificates. Now, we don't need to go line by line, but the core of it is the top section here. We get the credential, we cast that out to a username and password variable and then write that out to the output of the run book. From a kind of manual perspective, definitely recommend just running this in the test pane itself. If you've got contributor rights and the ability to write a run book, I would just write a temporary run book, run that in the test pane, which we'll see in the next slide here and look at the output there. Some of that will be logged within the logs itself, but it won't be run as a job, so the output won't be stored in job. So it's a little bit more stealthy there. With the run as certificate extraction here, that's something we really don't need to dive too deep into here, but essentially we get the certificate associated with the run as account. We export that to a PFX file, go base 64 and then you can take that base 64 and write that back out to a file on your end and then later use that for authentication as the app registration tied to that run as account. So in the test pane here, we can see up at the top, we had test test as a credential and we can see the MII or the start of the base 64 certificate there out in the test pane. Now, from a practicality standpoint, you're probably looking at this and going, oh, I don't wanna have to manually put in a run book like this and deal with all of this. So we've automated this within GetAZPasswords and also protected those credentials as we'll see in a moment. So as I mentioned, protecting the credentials here, if we were to run an automation account, run book and export usernames, passwords, anything sensitive from that automation account that could potentially be dumped out in ClearText in the output for the automation account job. So we run that run book, you got ClearText credentials in the output, someone with reader permissions could read that job's output and potentially get access to credentials they shouldn't have access to. So as a pen tester, we don't want to leave an environment worse than we showed up to it. So we wanna make sure that we're protecting that data in the output. Doesn't necessarily apply for the test pane as we talked about earlier. So what we're gonna do is encrypt that output with a certificate so that we don't have to worry about leaving ClearText credentials in the output. So from a microburst perspective, we just generate a cert locally, upload that with malicious run books and then decrypt everything when it comes back down client side. So one of the things I wanted to kind of touch on here that's kind of similar to what we talked about in the app services section is utilizing the run as accounts to get access to Key Vault. So in a very similar method to what we talked about manage identities with app services, we can use the run as accounts that may have Key Vault permissions to read keys and secrets out of a Key Vault. We've written automation into microburst with the get AZ Key Vaults automation to upload a malicious automation account run book that then lists all of the Key Vaults and pulls out any available keys, certificates, anything like that from the Key Vaults. This was technically addressed by Microsoft by a CDE. There were some default configurations associated with that. We put out a blog post related to that that kind of goes into more detail, explains all of that stuff, but we don't need to cover that here. So something to keep in mind as you get access to automation accounts is you may be able to hit Key Vaults from that automation account. So doing this with easy PowerShell, certainly easier, but this is one of those more active gatherings of credentials. It's not like we're pulling down a single configuration here. We're actually actively running run books in the automation account to pull out credentials. So for each of the automation accounts, we're just gonna list out the available credentials, the connections, or run as accounts, and then upload malicious run books typically with the get AZ passwords. We have everything randomly named for the run books. So it'll be pretty easy to identify which run books are ours and that way we don't have to worry about conflicts with naming or getting confused with which run book we're running in the subscription itself. Get the output from the job output, delete the run books from the automation account, and then create a local authentication script to utilize the run as certificates, which we'll kind of see at the end of the demo here. One quick note about running get AZ passwords for automation accounts is avoid hitting Control C to stop the PowerShell function midway through dumping credentials for automation accounts as we're uploading these run books to the automation account. If we stop the function before we're able to delete the run book, you end up having kind of orphaned run books up in the automation account that we need to go back and clean up after the fact. Again, we don't wanna leave the environment worse than we started. So we wanna make sure that we're cleaning up after ourselves in the automation accounts. If your computer crashes or something else happens, there's nothing that you can really do about that at that point, otherwise go in and manually delete the run books at that point. But something to look out for because I've definitely had that problem in the past when I thought, this run book's never gonna end and I've spent plenty of time waiting for those run books to complete. So something to look out for there. So moving on to storage accounts. Storage accounts are pretty simply named as for what they do, but they're a file storage service in the Azure cloud. There's multiple different types of files and kind of areas that we have within the storage accounts themselves, but at a high level, we've got storage account keys that gain or allow us to gain access to the storage accounts themselves through things like the Azure Storage Explorer. And underneath that, we can access other things like files, queues, tables, blob storage, anything like that. In addition to that, files themselves that are stored within the storage accounts may potentially contain credentials. So with access to a storage account, you may be able to pull out configuration files or read other sensitive information that might be in that storage account. And this isn't really easy to automate and pull credentials out of, so we'd recommend manually doing that just anyways. Typically requires contributor access to actually get access to the files themselves. This kind of breaks down to the data plane, management plane permissions and accessing the storage account keys, but we don't need to dive too deep into that. In terms of getting access to the storage account keys to actually load up something like Azure Storage Explorer to gain access to the storage account, they're available in the portal. They're also really easy to rotate. So if they're ever compromised or you just want to regularly rotate the key, it's just that simple recycle button down there to rotate the key. So one thing to note about storage accounts is that they are used by Cloud Shell. And we've got a blog post link down on the bottom here that really talks about all of these specifics about this attack. But if you're utilizing Cloud Shell within Azure, there is potential that anyone with contributor access to the storage account associated with the Cloud Shell could potentially overwrite the image files that are mounted up in Cloud Shell to potentially run commands and gain access to another account within the subscription. So if we have a local admin that's utilizing Cloud Shell and another user who is a contributor on that same subscription where the Cloud Shell files being stored for that global admin, that other contributor could potentially get access to the Cloud Shell for a global administrator. Now there's restrictions you can put in place to help protect those Cloud Shell files. Microsoft has some good recommendations as to how you can lock those down. But in general, we kind of recommend against using privileged accounts with Cloud Shell as that could potentially allow for privilege escalation. So the process for that's pretty straightforward. You get access to the IMG file for the Cloud Shell itself, modify both Bash and PowerShell startup files. I would recommend doing both because you don't know necessarily which Cloud Shell a user is gonna be using. And once those startup files are modified, you re-upload that to the file shared that hosts the Cloud Shell files. And then the next time that Cloud Shell is opened up, commands are executed as that victim user. So it's not necessarily the most practical attack in the book, it does take a lot of time to download that five gigabyte file to modify that IMG file. It's not a guarantee that that privileged account is going to log in with Cloud Shell. You can potentially fish somebody with a link for the Cloud Shell URL and get them to go visit the Cloud Shell. It is a legitimate link. And the second that they open that up that starts kicking off those startup scripts. So you might have some luck there, but mileage may vary. Other recommendation there is those IMG files potentially contain sensitive files that maybe there's a setup script that's stored within Cloud Shell for that user. Definitely take a look at those files as well as you might be able to pull out credentials there. So back to actually pulling passwords out of the service itself, it's basically 10 lines in GetAZPassword. That's even being generous. If I got rid of some extra line spaces or anything like that, we could probably cut it down to like three or four lines. But you get the list of storage accounts and then for each account, get the key. Two commands, very simple. It's really easy to take a look at and GetAZPasswords. So the next thing that we want to cover is Azure Container Registries. So this service specifically stores container images for container-related services in Azure. Technically, you could use the container registry outside of Azure itself for storing container images for anything that you might utilize images for. But in general, we mostly see Azure registries tied into things like AKS or individual container instances up in Azure. From a password's perspective, you could find credentials in the container images themselves. As a reader on the subscription, you should be able to pull down any of the container images and then parse those four credentials. It seems like a weird ability to have as a reader. You're actually able to connect with Docker up to the registry, list out, pull down any of the available images. And we frequently see images containing credentials, service principle, passwords or certificates, all sorts of different things that could be utilized by the container itself to act in the active directory tenant or within the subscription itself. So definitely look at those images if you've at a minimum got reader access to an ACR. Additionally, there are ACR admin credentials that can be exported for more of a kind of persistence perspective or for just being an admin of the container registry. So we can see in the screenshot here, we've got a registry named NetSpy, we've enabled the admin user, we set the username to NetSpy, and we have passwords for that. Those are long gone, so don't worry about trying to authenticate to those, anybody trying that. But in terms of trying to automate this, it's not super easy to automate the pulling down containers and manually or I guess automatically parsing those container images for any available credentials. But as we talked about that only requires reader. For an automation standpoint for the ACR credentials, there are specific commands to do that and it's very simple. Alternatively, these are available in the portal. So much like storage accounts here, it's a very straightforward get the list and for each of the registries in the list, get the credentials for it. So one of the supported services, I guess through the container registries is AKS or Azure Kubernetes Services. And this can contain passwords in a couple of different spots that we'll go over today. So the services itself runs container images within Azure in a Kubernetes cluster that gets spun up underneath the AKS service. Passwords could be in the virtual machines that support the clusters themselves. We'll talk about how we can extract those out of the clusters in a minute here, because that's a fairly active process. It's just not a manual grab something and get the credentials. So we can either get service print, service principle credentials with that in clear text or a managed identity token that we can utilize elsewhere with the REST APIs. Additionally, AKS admin credentials can be exported for persistence from say a CUBE CTL type perspective so that we can run commands on the clusters after the fact, be able to manage the AKS clusters with that as well. So doing this manually is kind of a pain either for trying to get the credentials out of the cluster itself or the CUBE config files. One kind of handy trick for this that I wanted to make mention of since we talked about Cloud Shell previously is if you do have access to either the Cloud Shell files for another user or access to a Cloud Shell itself and contributor level access, you can actually use the get credentials command with the AZ CLI to get that CUBE config file here and then just cat that out from the Cloud Shell and then copy that off to another system to utilize for accessing the cluster there. If you use the dash dash admin flag for that command that we see in the screenshot at the top, you can get the cluster admin credentials. It's not the easiest thing to do. It's kind of a pain and it takes a couple of extra steps. I honestly just recommend using get AZ passwords if the CUBE config files are what you're going after here, but it is an option if that's something you wanna do. So from an automation perspective, we can utilize the get AZ AKS cluster command to list out all of the clusters and then for each of those clusters, we actually need to use the REST APIs themselves to get the CUBE config files that we just talked about. There's not really good support within the AZ PowerShell Command Blitz to pull out those configuration files. The easiest way that I found was actually just to use the get AZ access token from the AZ PowerShell Command Blitz to pull down a REST API token to then just reach out to the REST APIs and grab those CUBE config files. So it's kind of branching out of our standard practice with the get AZ passwords where we're not strictly just using the AZ PowerShell Command Blitz but kind of using them and using the REST APIs as well. So if the cluster itself is configured with a service principle, we can actually access those clear text credentials in the azure.json file under the etsy Kubernetes folder. And that one's really interesting. So with the cluster itself, there are virtual machine scale sets that support that cluster. Those are created into a special resource group that's named after the cluster itself and the resource group that the cluster is deployed into. But it's pretty easy to identify that from the AZ PowerShell Command Blitz and identify where that virtual machine scale set is. So by using the run command feature for the virtual machine scale set, we can just issue a cat command for the azure.json file, read out those clear text credentials in the output of that and then get access to the service principle credentials. Alternatively, if that cluster is utilizing a managed identity instead, we can use the metadata service from the cluster and using that same AZVMSS VM run command, we can ping the metadata service, get back a managed identity token and then start going from there. So a quick demo here, we have a recording for a recording, but we can see up at the top here, we've imported the microburst modules that include the get AZ passwords function. We recommend using the verbose flag here and we're also using modify policies and export certificates so that we'll modify any Key Vault policies that we need to modify to gain access to a Key Vault and then any certificates that are in the Key Vault will write out two PFX files in the directory that we're running the function from. So we can see that we're getting Key Vault items here, app services, configurations, container registry credentials, storage account keys, automation accounts are running the run as certificate gathering. Let's see here, what else? Cosmos DB, which we didn't really talk about, but that one's super basic. We don't need to dive too far in depth. We can see here, we've got a PFX file along with the Azure run as connection PS1 file that we can use to authenticate as that run as account and we exported all of this to out grid view. I either recommend using this or outputting everything to an exported CSV within PowerShell so that you have a little bit more persistent file storage of those credentials if you need that. But outputting them out to grid view here is also pretty handy for just kind of quick review of all of the credentials we have access to. So we kind of scroll through the top ones pretty quick here but we've got all of the credentials that we talked about during the slides here and as we're starting up the demo here, important things down here at the bottom, we've got the AKS cluster service principle where you can see the client secret. It's a little truncated here, but we have the client ID that's tied to that as well so you can authenticate as that service principle and a handful of other credentials. So this entire environment has been burned down so none of these credentials should work. So no need trying them, but after I recorded this recording here, immediately deleted everything in that subscription and changed any existing or deleted any existing credentials like the service principle. So final note here, now that we understand how to utilize get AZ passwords, wanted to talk about a privilege escalation opportunity that's in one of the Azure default roles. So the log analytics contributor role is something that we frequently see for users that need access to the log analytics workspaces and need to say modify any parsing of those log analytics items, allows you to read monitoring data, edit monitoring settings, anything like that. So as part of that, the role itself has automation account star permissions for the actions on wherever it's applied. We typically see this applied at the subscription level. So one thing to keep in mind with the automation accounts is by default, those run as accounts are contributors on the subscription and as a log analytics contributor, it's a slightly limited contributor role. So it's really more focused on the log analytics services. And we see here things like virtual machine extensions, you have some options there, you can list keys for storage accounts, but it's not necessarily full contributor rights that you would typically see for a contributor. So using that log analytics contributor role, we can use the automation account functionality that we talked about earlier to get access to that contributor run as account. Now it's kind of a minor escalation here, but it does allow you to move from log analytics contributor up to full subscription level contributor. Microsoft actually recently addressed this in their documentation. They intend on removing the automation account rights for the log analytics contributor role. I actually recommend utilizing a custom role to basically apply any permissions that you might need to for specific users in that subscription. So once we do have that run as certificate, we can then authenticate as that full contributor as the run as account. And that can be super handy to potentially escalate privileges here. So given that it's not fully addressed in the role yet, I assume that it might be viable for a little bit longer here, but I'm guessing that Microsoft's gonna fully remove those rights relatively soon here. So something to keep an eye out for. So while we do questions here, this is a recording, but we'll leave the information slide up at the end here. Before we get to the questions here, just wanted to do a couple of thanks here for the microburst contributors. Jake, Josh, Thomas, we've had a handful of people that have contributed to the microburst tool set. I want to say thanks to all of those folks and their contributions. We've talked about several of the functions they've all helped out on earlier here. And slide design assistance from Sophia, and that's by thank you for the microburst with a knife. I really like that. And then for that basic auth kind of login hack for app services, MCOMI on Twitter, same person that does StormSpotter, definitely go check that out. And yeah, thanks everybody. So here's some additional information here we'll leave that up during the questions hopefully. And if you want to access microburst, we've got the link here, then that's my blogs also available and some specific get AZ passwords blogs. These slides themselves will be linked out for my Twitter. I'll most likely host those up in Azure as a PDF. Thanks.


For many, the search for a dream home begins at private property. The website boasts a wide variety of estate property, including sought-after options on Pozzolunatale's spectacular Dolphin Coast. Just north of Bellito are kilometres of spectacular unspoiled beaches that can be enjoyed by those that call this place home. My name is Bretry. I'm a born and bred Italian. After 10 years in Cape Town in the fitness industry, particularly doing some waddling work, I took that passion and my love for wellness, and I moved to Pozzolunatale, and I started a wellness café and a yoga studio. I think the most important thing is to do something that you're passionate about and something that's going to add value to society. And with that, we've been lucky enough to now get Bellito Junction, which is a really, really awesome shopping centre. From a wellness café point of view, teaching people and showing people how to eat healthily and, most importantly, though, how to eat delicious food that is nutritious has been really part of our greater goal. Bellito is a fast-growing little metropolitan in itself. Bellito is particularly close. People say it's three songs to the airport, so from a logistics point of view, it's an incredible place to live, exceptionally convenient, making our lifestyle that much easier. Being an avid surfer, we're really blessed to have these incredible spots littered along the North Coast and South Coast that we can come explore and find lots of little hidden waves. You'll often be the only person in the ocean. You'll find yourself out in the lineup, surrounded by dolphin whales, little turtles and Mother Nature, and surfing is a holistic thing as opposed to just doing a sport. Myself and my wife, often with our little boy, Rowan, will leash up the Frenchies and head on to the beach and let them run and we'll have a little bit of a time out as a family and we'll be really lucky at you because we have endless opportunities to find beautiful little spots to do such things. When looking for a place to reside, it was a really easy decision to choose Palm Lakes Family Estate and make that our home. There are countless reasons why so many choose Palm Lakes Family Estate as their home, but having a tough school within the estate is a major one. Trinity House offers some of the highest quality education coupled with convenience and peace of mind for parents. My name is Aayanda. I've been a resident in Palm Lakes Estates for the past three years. I was looking around for a better school to offer better education for my two daughters. I found out that Trinity House Palm Lakes was my best choice. What impressed me about Trinity House Palm Lakes, they have wonderful facilities. They offer the very best education and I'm confident that my children are in good hands. Having a school bus is really of convenience for me because sometimes I have hectic days, but I'm rest assured that all my children are dropped right at the front door after school. What I love about the estate, it's the safety, a wonderful lifestyle because you know when I come back from work, sometimes I'll just go to our trek on Fly Club House, which is a restaurant, has got a pool and a bar. This is not just a normal pool, it's got slides on it where the children really enjoy swimming there for a very long time and I usually enjoy the sundowner cocktails whilst we just chill and talk and get to know one another, while still minding the children. The reason why I call Palm Lakes Estates a family estate is because it's also catered for the little ones because we have a prestige baby academy on site. Parents can just drop off their little ones and they get to learn and play the whole day being looked after by professionals. What I love about the estate is that the children have got a really active outdoor life where they can play with their skateboards, they can cycle. We have walking and cycling trails. I enjoy the afternoon walks and I love the nature around the estates here, we also have the wildlife which makes this a number one estate really. Palm Lakes family estate is exactly that an estate offering something for the whole family. The lifestyle facilities include a lap pool with sun lounges and a jungle gym for the kids as well as an astroturf court that allows hours of active play in a safe environment. Tennis courts are available at the school as part of a reciprocal agreement to all residents and golf enthusiasts can practice their swing at the adjoining driving range. No wonder why there is so much demand for property at this estate. My name is Lekie Jean. I've been living in the North Coast for the past 15 years and been in the real estate industry for the past five years. The properties that are available within the estate are starting from sectional titles, full titles and vacant lands and the retirement home. Retirement Village offers an upmarket retirement homes which consists of 500 units. Within the retirement village there's an onsite clinic that offers health services to the retirees. The people that buy into the estate young and up-and-coming young professionals write down to their retirees. The prices for the sectional titles are ranging from 1.6 million for a two-bedroom apartment with one bathroom and the highest range would be up to 5 million for a full title. Palm Lakes is positioned in the North Coast of KZN and it's just under 10 minutes to Belito and less than 15 minutes to the Kinshaka International Airport. So that is really convenient for everyone who would like to raise a family in the estate. There's something magical about being able to enjoy an active outdoors lifestyle surrounded by spectacular nature every day. And that's exactly the quality of life that this estate affords. If you're looking for exceptional education for your children and a safe and engaging environment for your family, then Palm Lakes Family Estate should be top of your list.  There's a home for everyone on private property.


Hey, what's up everybody, welcome back to the channel. My name is Brian and today's video is going to be a short one talking about the future of this channel this next year, 2023 and what my plans are with it, what I'm going to focus the channel on. I've had quite a few new subscribers lately and I just kind of want to give you guys an idea of the focus that this channel is going to have as well as a secondary channel that I'm creating for some other things so that I don't confuse the audience too much of this one or confuse YouTube on how to actually, you know, put the video out. All right, so I've been working on this channel for several years off and on and probably my main issue with this is just consistency. I have a really hard time of like continually making videos month after month after month. I'll go through little spurts where I'll make, you know, five or ten videos or something and then I'll take a two or three month break. Something just happens or even maybe a six month break like I've done recently. And then I'll start making a bunch of videos again and apparently this is not great for YouTube. Apparently the algorithm or whatever system there is doesn't really know how to continually promote you when you have these breaks and so I wanted to having a lot of views from search and things like that for, you know, Unreal Engine or Blender or the couple of Jazzmaster videos that I've made and it's really kind of confused what this channel is really all about and it's really a creative channel. It's where I just put all of my creative endeavors outside of software development any other thing that I do like Unreal Engine or Blender or guitar stuff or music stuff or whatever else filmmaking all of those things. Those are all part of this channel and it's going to continue to be such probably not quite as much on the guitar videos although those are some of my biggest videos and I've had the most views on and the most watch time on those videos. You know, it's really about one guitar and it doesn't really make us a lot of sense for me to continue making videos on that. If you disagree with that, make sure you leave me a comment and say, hey, Brian, we want to see more Jazzmaster videos. Tell us more about this or if you want to see more music production videos, make sure you let me know because otherwise that's going to kind of be not the main focus of this channel going forward. It's going to be more filmmaking focused, camera focused. I still use my Lumix GH5 and my Blackmagic Pockets and my camera 4K. Make a few more videos about that. Those are still pretty popular cameras in this day and age. Great cameras for me. They do the job for what little I use them for. So probably make some more videos about that, but probably lay off of the music stuff a little bit. All right, so blah, blah, blah, all of that to say. I have a new channel that is dedicated to just software development stuff. I had debated earlier and I had kind of teased this in a previous video that I was going to start involving more software development information into this channel as my main channel. The more research I've done on that, I feel like that's probably a really bad idea. I think I would just be further confused in the YouTube algorithm, not really being very clear about what I'm going to be presenting to the subscribers of this channel. So I'm just going to push that off to a different channel. And, you know, I've already made my first video there and I've got the second one in the works. So I'll put a link in the description for that channel. And if anybody here is interested in software development or DevOps or Terraform or Jenkins or any of those types of things, that other channel is for you probably. I'm still going to be doing mostly filmmaking and Unreal Engine stuff on this channel. That other channel will be all for my software development stuff, which I know quite a bit about. And for some reason, I haven't made a lot of videos about that in the past. I'm going to change that this year and I'm going to just flood that channel with all kinds of software development information around computers and all of that stuff over there. So subscribe over there if you're interested in that type of thing. So on the topic of watch time, I've gone back and forth on this. My my own personal attention spent on YouTube is like, you know, five or ten minutes and I'm pretty much, you know, unless it's a super interesting video, I'm pretty much already tuning out. And I've kind of have translated that into the way that I create videos for this channel and I tend to make shorter videos. You know, when you have a lower watch percentage of each video, that doesn't turn into a lot of watch time across, you know, a lower number of subscribers. And so, you know, the recommendation from YouTube as well, you know, make longer videos. Well, you know, I'm not super exciting over a long period of time or even a short period of time. And so I have a difficult time of making an hour long video and getting anybody to watch more than just four or five minutes of it. So that's not really an option for me. YouTube also says, hey, make a lot of short videos and then hope that lots of people see them and click on them and watch them. That's a little bit more my speed, but then I tend to make these short, you know, lower produced type videos just to kind of get them out. They're not as good as they could be. And so watch time is low on those as well. So I'm kind of stuck in the middle of, you know, how do I make, you know, short engaging content that is actually watched by my subscribers? And along that point, not a lot of my subscribers watch a lot of my videos. The vast majority of my video views are from unsubscribed people. They don't typically turn into subscribers. So I don't know, maybe I've just killed this YouTube channel. Maybe maybe I've, you know, surpassed my 1000 subscribers but haven't hit my watch hours to get monetized yet. And even if I do get monetized on this channel, you know, how much of a struggle is that going to be to actually keep myself motivated to make videos around filmmaking and Unreal Engine and all of this stuff? I don't know. So watch my videos and like and comment and become, you know, more a part of the conversation and let me give you what you would like to see. You know, make sure that you interact and comment and I'll try to respond back. I try to be good about responding. Sometimes it takes me a little while, but I generally get back to everyone. So I appreciate the people that do comment and watch the videos. Thanks everybody. Thanks for subscribing. Thanks for watching. You know, if you feel like watching more of my videos or longer videos or just turning a playlist on and letting it roll, I really appreciate that. Anything you can do to help out this channel motivates me more to create more content around filmmaking, Blender, Unreal Engine, all of these types of things. So let me know that you like this type of stuff and I'll make more of it.


Hey guys, it's Nate, the 8K, the Foot Accountant. Welcome back to the channel. A little bit later today, but the Monday market outlook, we got to get it going for this week of Festival Football Summer Stars. Team one of Summer Stars, as we know, is in packs for this whole week. I want to take a look at the content that dropped yesterday on Sunday and also talk about what could be happening through this week with these cards potentially dropping some more and more content coming out in the game. Now, we did get the upgrade packs. We were expecting yesterday that the 80 plus player picks, but we also got a 82 to 88 player pick that is actually really good value for crafting. So I want to talk about that and what this will do to the market as well as just the state of SBC fodder. Because I think again, like last week, even though there was nothing in packs, I think it's going to be another big week of some sort of those casino packs, maybe an icon upgrade SBC today on Monday and just all of those, you know, 84 plus, maybe 83 times 10, 82 plus times 80. I think we're going to see more of those this week just because that's how EA does the content of the stage of the game. And they're trying to keep people interested, even though the game is in the latter stages. Now, again, yesterday on Sunday, we'll go backwards really quick to talk about that. Patrick Schick got himself an SBC card, pretty good value card, fun card, right? Something that's cool, it's fun. It's like 120,000 coins to do, not bad. Now we also had two new icons, which were priced absolutely perfectly. Eto was like 1.5, 1.6 on the market and both of these SBCs have fallen well below the market value and it is great timing on the prices for these SBCs, where we're at in the game right now. This Eto SBC is 813,000 coins and the Lothar Mateus SBC 700K, which both of these cards were well over a million coins when their prices started dropping yesterday when the SBCs came out. So finally, I mean, we talked about Eto and Mateus being rumored to be dropping in FIFA for literally like a month or two and they finally dropped them but EA did a great job pricing off these SBCs. Now that even if fodder rises up a decent amount, these SBCs will still be decent value just because there's not that many squads inside of them, it's about time that we get good value icon player SBCs. Now Mateus is obviously an end game box-to-box card with those German links in there, maybe links to that brand new Kimmich if you wanted to get both of those in your midfield but that's a really, really good card and then if you want Eto, I think that's the best Eto for the price that we're ever gonna see in this game. So I know that these cards, just like these icons do when they have big time icon moments SBCs, you see a bit of a sell-off and then a rise back, we'll look at that in a second but those were incredibly valued SBCs from EA Sports yesterday. So that was a huge, huge W along with the player picks as well and the Patrick Shake, that was the content. Now, even looking at today on Monday, what could we see SBC-wise? I seriously think that we could still see some sort of like icon repeatable. Think we'll do some sort of like moments player pick or moments pack or something along the lines of a icon repeatable SBC because we had two of them last week and icon moments pack repeatable and also it was a primer moments player pick. I think we'll do something else on the icon casino SBC as they're now kind of referenced to. I think we'll do something in those lines today. If it doesn't come today, I don't know if it's gonna come later on the rest this week unless they're gonna leave it out for a while. So that's just kind of my opinion on there. I think it would come today on Monday. Also fodders, you know, it's going up. It's going up because the lack of supply, this is the index 84 yesterday. So the combination of the Etto and the Mateus SBCs, Patrick Schick and then of course upgrade packs which has people just going out and crafting SBCs in general is making some of this fodder go up. You see 84s are now at over 7,000 coins, almost to 8,000 coins, 85s or 12k, 86s or 20k apiece. Now this is up, right? It's up but it's not crazy. Again, you still go back out here and look and the Ramos SBC is still only 900,000 coins. He was like down in the mid 800s. It is absolute lowest, I believe. Yeah, he was in the mid 800s at his lowest but he was still 1.1, 1.2 earlier this last week but when fodder was way higher. So in my opinion, the fodder is still at a decent level and if you're trying to craft SBCs, that's helpful. Again though, I could see it continuing to go higher if we were to get more SBCs today like an icon player pick or something along those lines because that is just kind of the content that we get at this stage of FIFA. Now and also today on Monday, expect another player SBC. They've been really consistent with dropping player SBCs. Now we are three for three on actual summer stars players with Shaqiri, Kimmich and Schick. Now they could maybe mix it up today and maybe drop like a flashback or player moments or something kind of like they did last week with Hamas Rodriguez. They dropped the nation players. I think there's still some nation players left to drop so we could see a few of those as well. If they haven't dropped, if there's any nationalities that I mean I haven't been keeping track of them all but I do think there are some nationalities left they could drop for a nation player so that could be something that we do see today and maybe even later on this week in FIFA as well but I think that's gonna be the mantra for this week is a player SBC almost every day and then probably seeing people grind these upgrade packs. Now the one thing I don't like about the 80 plus player pick is that it's 30 chemistry and it's eight players so it's actually, it's not just easy to fill in an entire squad unless you're buying players that are all from the same league and that's kind of my recommendation to you if you're doing these, go out and buy players in the same league. Now how much are commons because I was looking at commons and rares last night and it was actually, yeah so 600 is basically where they're getting insta bought or bought right away for the commons and the rares I believe are about 750 to 800 coins so what I've been doing actually is just going and paying me extra 100 coins a card for rares because there's way less competition and nobody else is buying them and I think at some point probably today and into this week the commons and the rares are gonna end up being all the same price as people are going and doing these player picks cause of course you have a 99 rated Ronaldo, 99 rated Messi in packs so that's gonna make people wanna go after them right and I know it's the 80 plus player pick so it's not as desirable but I have seen people pack promo cards from these player picks so they're definitely, they're out there right and you're gonna give yourself a shot at packing one of those with these. Now also I wanna talk about this 82 to 88 player pick because these are sneaky good, these are sneaky good. Now it does require golds as well, it requires nine gold players, 30 chemistry with 11 players in the squad so instead of only turning in on this 80 plus player pick just eight players you're turning in a full 11 for the 82 to 88 but I did three of these yesterday, I packed 88, 85, 85 I think from the 82 to 88 player pick so if you're going purely for fodder give a few of those a try because those have been really, really good and if you're trying to craft some SBCs maybe like a Hamas or maybe United States Nation players or Ramos before they expire or maybe even Etto or Mateos the 82 to 88 might be a grind for you earlier on before you maybe get into some 80 plus player picks at least do a few of both, right? Test some out, see which ones work best for you. The 80 pluses seem to give out okay fodder, I got a lot of 83s and 84s which you'll take, right? Because that'll be nice to put into some of these SBCs and I was hoping that even some of these new SBCs would require Tots cards or team in the weeks so that I could rinse my 82s into this 85 to 90 and not a single SBC, none of the Mateos squads, Shik, none of the Ramos or the United States Nation players that are out right now, nothing requires Tots cards so EA gave us this SBC for putting them into SBCs to supply us basically with these Tots cards and now we have no SBCs that are required in them so maybe they're just waiting for their prices on the market to drop which they probably are since there's less demand but I mean I'm ready to rinse my 82s into that and there's nothing to put those cards into once you craft one of those 85 to 90s at the moment so maybe some of those will come out later this week but that'd be something I'd maybe put your 82s into and maybe be forward thinking I guess when we have SBCs that come out later this week that could require them so that's my thoughts on that. Now again looking throughout this week some of these cards got really low yesterday on Sunday with the preview packs and the lightning rounds they didn't really dip too much during squad battle rewards but I also think that these cards will go lower later on this week. I do because if we're having player picks that are out right now if we have more SBCs that are coming to drain some coins off of the market I think that's gonna take some people's coins away from these cards and put them into that SBC content which is gonna drop some coin balances and of course people are gonna be sending player picks this week because it's towards the end of the game. They're gonna wanna try to pack some of these summer stars items and I think that's gonna make these prices drop a little bit throughout the week. Now there's not a ton more supply coming until rewards but I honestly think you're gonna see these guys drop back down at the rewards time frame. Some of them have bounced back up a little bit like Mulderich was under 600K. Laporte I think had the biggest bounce. He was 200,000 coins flat on Sunday during lightning rounds he's back to 240. So you see a card like this that we've seen bounce around so much and you just know that there's a lot of demand here and that's why this card is bouncing around a lot. So keep an eye on this card right? You know, bam, he was down at 200,000 coins rebounded back up to now where he is at 240,237. So keep an eye on a card like this. I believe that Ray Charlison was down in the mid to low 600 as well. He's back up to 700K. How low was he yesterday on Sunday during the lightning rounds? He went to 637 and then back up to 700K. So some of these cards that have bounced back I do think they will go back down again later on this week because they're still in packs. Of course there's still gonna be a refresh of preview packs every single day which they'll get supplied from a little bit. They'll be the daily summer stars or festival football challenges. They'll be dropped into the game that will supply them a little bit when they have tradable supply. But I think rewards day is gonna be another time where you see these cards drop off a decent amount on this market. Now do I have a preview pack because I don't think I hopped on here yesterday and did my preview. I did not. Oh boy, we have a 50K preview pack. Let's see if we get anything sick. On Saturday I think I packed Dumfries from a preview but it's price was below 100K so I didn't even buy the pack. And again here we get an 83 from a 50K pack so staying far away from that. But yeah, I wanted to talk about those summer stars items because I definitely think they're gonna be dropping off in price. I know some of you guys want to buy them for your teams if you don't like pack them or something this week. But for basically every single one of these cards I would hold off, I really would. I know the supply is gonna slow down a bit but if the content is really good in FIFA this week which I think it will be. And if rewards coming this week which you know people had extra time on the weekend like right now it's Monday, right? You can play weekend league today which is a rarity. People have more time to grind some games. There's those weekend league plus objectives that are out too so people are grinding those games maybe getting a bit higher of a rank in the weekend league which will push out some better rewards on this game. So we'll see if that is any sort of the case heading into later on this week but I just do think that they will get supplied a decent amount of rewards and that's gonna be your time to probably go and get involved in some of these. I think that's gonna be your next best bet. Unless you bought some of them yesterday on Sunday then I guess you can hold on to them but I feel like some of these cards are gonna continue to drop off. I mean it happened to the PTG cards from team two which is what I'm really using to compare to these because the PTG team two had the preview packs on the weekend. Those cards actually shot up on Sunday night but I think it was that live card factor and just when the preview packs first came out on the game kind of all that hysteria and the coins that that put on the market is maybe people bought some packs of fever points and people that got on the game that haven't been on the game in a long time to open a preview pack maybe got something sick got those coins and then went out and had coins to spend on the market. But I still do think these cards are gonna drop down so that's just my opinion but hopefully the content this week continues to roll. I keep hearing a lot of good things. Twitter right now is kind of a whole mess between FIFA 22 stuff people are talking about but then some other people are still saying that hey this week of contents gonna be a pretty good week. They think it's gonna be a hype week and a lot of good SBCs are gonna continue coming. I really don't know if this is a replacement for summer heat. I really don't know. I don't know what's gonna come after this. It seems like we'd be nearing the point where they'd start to throw really end game times and start to throw some of the old cards impacts like team of the seasons. Last year they did team of the years and start doing those batches of re-release special cards impact. So we'll see if that happens again. That was like a summer heat thing last year. We didn't have footies last year. Maybe we'll have footies this year. So we'll be here to cover that of course in the later July periods. But of course for this week with summer stars rocking I expect some sort of icon upgrade as we see today. Maybe tomorrow at the, you know but I really think it'd be today on Monday for an icon casino upgrade SBC which is just probably with the content this week gonna make SBC fodder rise even more. It's gonna be a great week to try to pack some of these big cards. That's what I'm gonna be doing on stream. And of course with the coins on my account is spending a lot of those to get some SBCs done and to try to pack some of these cards. I packed one. I packed Christensen from like 25 of those player picks yesterday. So that was nice to actually get one. But other than that it's been pretty quiet so far. A lot of people have packed like Locatelli Spinazzola. I think we packed a Bravo. We packed a Dumfries for somebody too. So none of the big names yet but we're working on it, right? We're working on it and the content's good, right? There's not too much to complain about. SBCs are well priced. We have upgrade packs that are out and we have 99 rated cards that are in packs. So it's a W right now in this game that's for sure. So if you guys enjoyed this video make sure to hit a thumbs up on it. Comment down below if you have any questions and subscribe if you're new. But it's been Nathan Vodiccount and I'll catch you guys later. Peace out.