EricWacker

@[email protected]

InfoSec geek working in the K-12 space. Often caffeinated, always a dog person. Opinions are my own, not those of my employer.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

EricWacker, 10 months ago to random

Does anyone in #infosec know if, given a set of compromised (student) credentials to a school district’s Google Workspace, whether it’s possible to scan Drive for anything shared with the “Anyone in [domain]” setting and potentially mass-exfiltrate data that way? I would hope that Google would make this type of activity difficult, but cannot rule it out with what I (don’t) know about red team tools.

reply

report

activity

copy /kbin url

copy original url

Loading...