Evaluris

Scenario

Cloud (AWS / Azure / GCP)

One over-privileged IAM role from full tenant compromise.

Assess cloud posture and identity risk across AWS, Azure, and GCP. Misconfigurations, over-permissions, exposed storage, and lateral movement paths - with clear remediation and no guesswork.

Outcomes

What you get

Multi-cloud coverage: AWS, Azure, and GCP account and resource discovery
Misconfiguration detection (public buckets, open security groups, weak IAM)
Identity and permission analysis: over-privileged roles, credential exposure
Lateral movement path mapping from cloud entry to critical assets
Integration with cloud-native APIs; no long-lived keys required for read-only assessment
Findings mapped to CIS benchmarks and MITRE ATT&CK
Reports with remediation steps and policy recommendations
Compliance-ready output aligned to DORA (Art. 25 & 26), NIS2, PCI DSS v4, ISO/IEC 27001, GDPR, and TIBER-EU/TIBER-BE for cloud-hosted financial systems

Scope

What we assess

Storage exposure (S3, Blob, GCS buckets and access policies)
IAM/identity policies, roles, and privilege escalation paths
Network and security group rules (ingress/egress)
Compute and serverless configuration (Lambda, Functions)
Secrets and credential handling
Compliance posture (CIS, cloud provider best practices)

Attack path

Cloud identity chain

Misconfigured identity and storage become a cross-account impact path.

  1. IAM role

    over-permissioned

  2. AssumeRole

    privilege jump

  3. Storage

    public / policy

  4. Secrets

    KMS / SSM

  5. Exfil path

    verified

Demonstration

Live mission output

Multi-step chains with real CVE correlation, MITRE ATT&CK / ATLAS mapping, and verified proof-of-concept evidence - as SPECTER surfaces them in a mission.

SPECTER: cloud posture
_

Demo output (English)

Illustrative validated chains from staging engagements. CVE identifiers map to real-world threat intelligence (CISA KEV, vendor advisories). Destructive or high-impact steps (e.g. DCSync, LDAPNightmare exploitation) are shown as detected, operator-gated, or not executed where applicable.

Capabilities

Coverage at a glance

CapabilityIncluded
AWS / Azure / GCP
Storage & IAM assessment
Lateral path analysis
CIS alignment
Attack path chaining
Compliance-ready export (DORA / NIS2 / PCI DSS v4 / ISO/IEC 27001 / GDPR)

Scope this scenario in your environment with verified attack paths and compliance-ready evidence from day one.

Deploy Your First MissionSee full solution