The CyberCall Podcast

Augmented Cloud Hacking with AI Workflows + MSP Process Incident

• Andrew Morgan

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 1:07:57

I want to start with a question. How many of your techs have pasted a scan, a log file or a client ticket into ChatGPT this month? If you don’t know the answer, you’re not alone, and that’s one of the things we’re going to talk about today.

Our guest is Beau Bullock from Black Hills Information Security. Bo has been doing pen testing there for almost 13 years, and for the last six or seven he’s focused on cloud and Microsoft 365. He teaches Breaching the Cloud and Breaching 365, and lately he’s been building AI workflows that do a lot of his day-to-day work for him.

He’s going to show us how to run AI models without sending client data to OpenAI or Anthropic. He’ll also show workflows that review a tenant’s conditional access policies and OAuth apps and point out the gaps in a few minutes. And we’ll get into where AI still gets things wrong and why a person still needs to check its work.

There’s a lot here you can use with your own clients next week.