Pandora’s Container Part 1: Unpacking Azure Container Security Table of contents • Container Registries • Identifying Roles and Registries • Checking if Admin User is Enabled • Enabling Admin User & Retrieving Passwords • Pushing, Pulling and Tagging • Dissecting Docker Images • Modifying a Task With a Managed Identity • Creating a Malicious YAML File • Running the Task • Token Keys and Scope ...