Sources & Additional Resources that helped build this talk MITRE Unsecured Credentials: Bash History Blogs Aqua Sec [C4ISRNET])(https://www.c4isrnet.com/opinion/2017/08/31/cybersecurity-from-the-infrastructure-up-dont-ignore-ssh-keys-commentary/) JumpCloud Azure IMDS Access – Azure Instance Metadata Service (IMDS) Data Stealing Secrets from Azure IMDS Microsoft Learn 1 Microsoft Learn 2 Malicious Python Script Reversing Labs Sigma Data Exfiltration with Wget Linux Data Exfiltration Maverislabs Observe IT