codyburkard.com

What it is

Rainy Days Security Blog is the personal security research blog of Cody Burkard. The author describes himself as an American penetration tester and cybersecurity researcher living in Norway, with experience in penetration testing, application security, Microsoft Azure offensive security, and cloud-native architecture. This is not a security product or SaaS platform, but a deeply technical blog focused on Azure cloud security.

Core analysis

In terms of security focus, the content mainly covers attack paths and defensive considerations around Azure PaaS, such as key extraction from Self-Hosted Integration Runtime, obtaining Data Factory Managed Identity tokens, abuse of API Management policies, and privilege escalation via Azure Bastion and Azure AD dynamic groups. There is no platform for readers to deploy, but the articles provide Python scripts and examples using the azol library that can be used for authorized security testing. For management and alerting, the posts point out detection gaps and suggest observable data sources such as Activity Logs, Managed Identity Sign-In Logs, Sentinel KQL, and GatewayLogs, but the blog itself does not offer centralized management or alerting capabilities. Its integration value mainly lies in the fact that the research is deeply tied to the Azure ecosystem, including Data Factory, APIM, Managed Identity, Entra, and Sentinel.

Pricing and compliance

The captured text does not show any commercial subscription, consulting service, enterprise licensing, or payment method. The content can be regarded as freely available to read. There is also no mention of compliance certifications such as ISO, SOC 2, or GDPR. Therefore, it should not be evaluated as a compliance-oriented cybersecurity vendor.

Pros and cons

Its strengths are the depth of technical detail, including API paths, required RBAC permissions, log sources, detection suggestions, and code snippets. It is highly useful for red teams, cloud security engineers, and detection engineers. The drawbacks are that it has a high technical barrier, leans toward offensive research, and lacks systematic guidance for beginners. It also does not provide SLA, customer support, a console, policy deployment, or automated protection capabilities.

Who it is for

It is best suited for enterprise cloud security teams, Azure architects, red teams, penetration testers, and security researchers who want to understand emerging lateral movement, privilege escalation, and secret leakage risks in Azure PaaS during cloud-native migration. It is not suitable for users looking to directly purchase a protection platform, vulnerability scanner, or managed security service.

Access in China, payment, and alternatives

Access from mainland China cannot be determined from the text, and payment information is not disclosed. If access is unstable, alternatives and references include Microsoft official documentation, Microsoft Defender for Cloud, Sentinel documentation, and Azure security research from NetSPI, SpecterOps, and O3 Cyber. Domestic references in China include cloud security research and services from Qi An Xin, NSFOCUS, DBAPPSecurity, Tencent Cloud Security, and Alibaba Cloud Security.