---
id: 7735
title: "3 Lessons Learned from Simulating Attacks in the Cloud"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/cloud-pentesting/3-lessons-learned-from-simulating-attacks-in-the-cloud/"
published_at: "2025-07-22T00:00:00Z"
tags: ["cloud", "cloud-security", "siem", "azure", "detection", "logging", "breach-and-attack-simulation", "bas"]
phying_url: "https://phying.com/item/7735"
lang: en
---

# 3 Lessons Learned from Simulating Attacks in the Cloud

## Summary

Lessons from NetSPI's cloud attack simulations: default cloud logging alone is insufficient, SIEM rules need tuning, and breach and attack simulation (BAS) helps validate detective controls in Azure.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2025-07-22T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/cloud-pentesting/3-lessons-learned-from-simulating-attacks-in-the-cloud/
- **Phying News:** https://phying.com/item/7735