open-menu
closeme
App Granted Privileged Delegated Or App Permissions
calendar
Mar 29, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1098.003
·
Share on:
twitter
facebook
linkedin
copy
Authentications To Important Apps Using Single Factor Authentication
calendar
Mar 29, 2023
·
attack.initial_access
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
Guest Users Invited To Tenant By Non Approved Inviters
calendar
Mar 29, 2023
·
attack.initial_access
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
Potential MFA Bypass Using Legacy Client Authentication
calendar
Mar 21, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1110
·
Share on:
twitter
facebook
linkedin
copy
Temporary Access Pass Added To An Account
calendar
Feb 6, 2023
·
attack.persistence
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Account Disabled or Blocked for Sign in Attempts
calendar
Jan 29, 2023
·
attack.initial_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Azure AD Only Single Factor Authentication Required
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1556.006
·
Share on:
twitter
facebook
linkedin
copy
Change to Authentication Method
calendar
Jan 29, 2023
·
attack.credential_access
attack.t1556
attack.persistence
attack.defense_evasion
attack.t1098
·
Share on:
twitter
facebook
linkedin
copy
Failed Authentications From Countries You Do Not Operate Out Of
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1110
·
Share on:
twitter
facebook
linkedin
copy
Multifactor Authentication Denied
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1110
attack.t1621
·
Share on:
twitter
facebook
linkedin
copy
Multifactor Authentication Interrupted
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1110
attack.t1621
·
Share on:
twitter
facebook
linkedin
copy
Password Reset By User Account
calendar
Jan 29, 2023
·
attack.persistence
attack.credential_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
PIM Alert Setting Changes To Disabled
calendar
Jan 29, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
Sign-in Failure Due to Conditional Access Requirements Not Met
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1110
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Successful Authentications From Countries You Do Not Operate Out Of
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1110
·
Share on:
twitter
facebook
linkedin
copy
Use of Legacy Authentication Protocols
calendar
Jan 29, 2023
·
attack.initial_access
attack.credential_access
attack.t1078.004
attack.t1110
·
Share on:
twitter
facebook
linkedin
copy
User Access Blocked by Azure Conditional Access
calendar
Jan 29, 2023
·
attack.credential_access
attack.initial_access
attack.t1110
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
User Added to an Administrator's Azure AD Role
calendar
Jan 29, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1098.003
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
User State Changed From Guest To Member
calendar
Jan 29, 2023
·
attack.privilege_escalation
attack.initial_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Users Authenticating To Other Azure AD Tenants
calendar
Jan 29, 2023
·
attack.initial_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Added Credentials to Existing Application
calendar
Jan 28, 2023
·
attack.t1098.001
attack.persistence
·
Share on:
twitter
facebook
linkedin
copy
Added Owner To Application
calendar
Jan 28, 2023
·
attack.t1552
attack.credential_access
·
Share on:
twitter
facebook
linkedin
copy
App Granted Microsoft Permissions
calendar
Jan 28, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
App Role Added
calendar
Jan 28, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1098.003
·
Share on:
twitter
facebook
linkedin
copy
Application AppID Uri Configuration Changes
calendar
Jan 28, 2023
·
attack.persistence
attack.credential_access
attack.privilege_escalation
attack.t1552
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Application URI Configuration Changes
calendar
Jan 28, 2023
·
attack.t1528
attack.t1078.004
attack.persistence
attack.credential_access
attack.privilege_escalation
·
Share on:
twitter
facebook
linkedin
copy
Bitlocker Key Retrieval
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
CA Policy Removed by Non Approved Actor
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
CA Policy Updated by Non Approved Actor
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
Changes To PIM Settings
calendar
Jan 28, 2023
·
attack.privilege_escalation
attack.persistence
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Delegated Permissions Granted For All Users
calendar
Jan 28, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
Device Registration or Join Without MFA
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
End User Consent
calendar
Jan 28, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
End User Consent Blocked
calendar
Jan 28, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
PIM Approvals And Deny Elevation
calendar
Jan 28, 2023
·
attack.privilege_escalation
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Sign-ins by Unknown Devices
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Sign-ins from Non-Compliant Devices
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
User Added To Group With CA Policy Modification Access
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
User Added To Privilege Role
calendar
Jan 28, 2023
·
attack.privilege_escalation
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
User Removed From Group With CA Policy Modification Access
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
Users Added to Global or Device Admin Roles
calendar
Jan 28, 2023
·
attack.defense_evasion
attack.privilege_escalation
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Disabled MFA to Bypass Authentication Mechanisms
calendar
Jan 27, 2023
·
attack.persistence
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
Azure Firewall Rule Collection Modified or Deleted
calendar
Jan 11, 2023
·
attack.impact
attack.defense_evasion
attack.t1562.004
·
Share on:
twitter
facebook
linkedin
copy
Azure Kubernetes CronJob
calendar
Jan 11, 2023
·
attack.persistence
attack.t1053.003
attack.privilege_escalation
attack.execution
·
Share on:
twitter
facebook
linkedin
copy
Azure Kubernetes Service Account Modified or Deleted
calendar
Jan 11, 2023
·
attack.impact
attack.t1531
·
Share on:
twitter
facebook
linkedin
copy
Azure Network Firewall Policy Modified or Deleted
calendar
Jan 11, 2023
·
attack.impact
attack.defense_evasion
attack.t1562.007
·
Share on:
twitter
facebook
linkedin
copy
Azure Subscription Permission Elevation Via ActivityLogs
calendar
Jan 11, 2023
·
attack.initial_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Granting Of Permissions To An Account
calendar
Jan 11, 2023
·
attack.persistence
attack.t1098.003
·
Share on:
twitter
facebook
linkedin
copy
Guest User Invited By Non Approved Inviters
calendar
Jan 11, 2023
·
attack.persistence
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Login to Disabled Account
calendar
Jan 11, 2023
·
attack.initial_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
««
«
1
2
»
»»
to-top