---
id: 9544
title: "An Operator’s Guide to Device-Joined Hosts and the PRT Cookie"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2025/04/07/an-operators-guide-to-device-joined-hosts-and-the-prt-cookie/"
published_at: "2025-04-07T16:17:52Z"
tags: ["cloud"]
phying_url: "https://phying.com/item/9544"
lang: en
---

# An Operator’s Guide to Device-Joined Hosts and the PRT Cookie

## Summary

I’m not sure if the frequency at which I encounter cloud/hybrid joined devices has recently increased or if I was sleeping on this capability for literal years (more likely), but this tradecraft has been a serious crutch on red team operations in the last six months

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2025-04-07T16:17:52Z
- **Original:** https://specterops.io/blog/2025/04/07/an-operators-guide-to-device-joined-hosts-and-the-prt-cookie/
- **Phying News:** https://phying.com/item/9544