Automating Azure Abuse Research — Part 2

This post introduces the BloodHound Attack Research Kit (BARK) and shows how to automate, at scale, the validation of Azure abuse primitives using PowerShell-based atomic tests. It demonstrates testing which Azure RBAC roles allow executing commands on Virtual Machines via the RunCommand endpoint, running tests in parallel, and exporting results for reporting—enabling continuous, evidence-based verification of risky configurations as Azure services and permissions evolve.