https://daniyalahmed.dev/tags/redteam/Recent content in Redteam on Daniyal Ahmed | Red Team & Cloud SecurityHugo -- gohugo.ioen-usdaniyal.ahmed@microtechx.com (Daniyal Ahmed)daniyal.ahmed@microtechx.com (Daniyal Ahmed)Sun, 26 Jul 2026 00:00:00 +0000https://daniyalahmed.dev/posts/serverless-security-auditing-local-cache-storage-and-runbook-permissions-in-azure/Sun, 26 Jul 2026 00:00:00 +0000daniyal.ahmed@microtechx.com (Daniyal Ahmed)https://daniyalahmed.dev/posts/serverless-security-auditing-local-cache-storage-and-runbook-permissions-in-azure/When hardening an enterprise cloud environment, security teams often spend their time auditing internet facing virtual machines or locking down administrative user accounts. However, a less discussed but incredibly high value risk vector exists within serverless orchestration engines: Azure Automation Accounts. During a recent environment configuration review, we mapped an execution pipeline that demonstrates exactly how an oversight in local workspace hygiene combined with over-privileged service roles can expose an entire tenant subscription.