Want to use Azure Virtual Machine as RedTeam

Question

Assumes PenTest in a legal state.

Is it allowed to use a Virtual Machine as C2?

Do I need to apply for malicious traffic?

Answer 1

Hello, @59315168 !

Can I perform penetration/red team exercises on Azure using a VM?

This is an area where it's critical to review the current requirements as some tests are currently allowed under specific conditions however other tests are strictly prohibited such as performing a Denial of Service (DoS) attack. These are the resources you'll need:

• Penetration Testing Rules of Engagement: This is referenced on almost all related documentation and should be the first place you check for penetration testing.
• Microsoft Cloud Red Teaming: Informational PDF that includes the red team's code of conduct.
• Penetration testing: Documentation that covers basic dos and don'ts including standard tests, approved testing partners, tests that you are not allowed to perform.
• Recommendations for security testing: Includes some useful links for red team attack scenarios.
• Security Control: Penetration Tests and Red Team Exercises: Reference to links already covered.

---

I hope this has been helpful! Your feedback is important so please take a moment to accept answers.

If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!