open-menu
closeme
App Role Added
calendar
Oct 28, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1098.003
·
Share on:
twitter
facebook
linkedin
copy
Account Created And Deleted Within A Close Time Frame
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
Added Credentials to Existing Application
calendar
Oct 17, 2023
·
attack.t1098.001
attack.persistence
·
Share on:
twitter
facebook
linkedin
copy
Added Owner To Application
calendar
Oct 17, 2023
·
attack.t1552
attack.credential_access
·
Share on:
twitter
facebook
linkedin
copy
App Granted Microsoft Permissions
calendar
Oct 17, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
Application AppID Uri Configuration Changes
calendar
Oct 17, 2023
·
attack.persistence
attack.credential_access
attack.privilege_escalation
attack.t1552
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Application URI Configuration Changes
calendar
Oct 17, 2023
·
attack.t1528
attack.t1078.004
attack.persistence
attack.credential_access
attack.privilege_escalation
·
Share on:
twitter
facebook
linkedin
copy
Azure Domain Federation Settings Modified
calendar
Oct 17, 2023
·
attack.initial_access
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
Bitlocker Key Retrieval
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Bulk Deletion Changes To Privileged Account Permissions
calendar
Oct 17, 2023
·
attack.persistence
attack.t1098
·
Share on:
twitter
facebook
linkedin
copy
CA Policy Removed by Non Approved Actor
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
CA Policy Updated by Non Approved Actor
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
Changes to Device Registration Policy
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.privilege_escalation
attack.t1484
·
Share on:
twitter
facebook
linkedin
copy
Changes To PIM Settings
calendar
Oct 17, 2023
·
attack.privilege_escalation
attack.persistence
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Delegated Permissions Granted For All Users
calendar
Oct 17, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
End User Consent
calendar
Oct 17, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
End User Consent Blocked
calendar
Oct 17, 2023
·
attack.credential_access
attack.t1528
·
Share on:
twitter
facebook
linkedin
copy
Guest User Invited By Non Approved Inviters
calendar
Oct 17, 2023
·
attack.persistence
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Guest Users Invited To Tenant By Non Approved Inviters
calendar
Oct 17, 2023
·
attack.initial_access
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
New CA Policy by Non-approved Actor
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.t1548
·
Share on:
twitter
facebook
linkedin
copy
Password Reset By User Account
calendar
Oct 17, 2023
·
attack.persistence
attack.credential_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
PIM Alert Setting Changes To Disabled
calendar
Oct 17, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
PIM Approvals And Deny Elevation
calendar
Oct 17, 2023
·
attack.privilege_escalation
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Privileged Account Creation
calendar
Oct 17, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Temporary Access Pass Added To An Account
calendar
Oct 17, 2023
·
attack.persistence
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
User Added To Group With CA Policy Modification Access
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
User Added To Privilege Role
calendar
Oct 17, 2023
·
attack.privilege_escalation
attack.defense_evasion
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
User Removed From Group With CA Policy Modification Access
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.persistence
attack.t1548
attack.t1556
·
Share on:
twitter
facebook
linkedin
copy
User State Changed From Guest To Member
calendar
Oct 17, 2023
·
attack.privilege_escalation
attack.initial_access
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
Users Added to Global or Device Admin Roles
calendar
Oct 17, 2023
·
attack.defense_evasion
attack.privilege_escalation
attack.t1078.004
·
Share on:
twitter
facebook
linkedin
copy
App Granted Privileged Delegated Or App Permissions
calendar
Oct 12, 2023
·
attack.persistence
attack.privilege_escalation
attack.t1098.003
·
Share on:
twitter
facebook
linkedin
copy
Azure Subscription Permission Elevation Via AuditLogs
calendar
Oct 12, 2023
·
attack.initial_access
attack.t1078
·
Share on:
twitter
facebook
linkedin
copy
Change to Authentication Method
calendar
Oct 12, 2023
·
attack.credential_access
attack.t1556
attack.persistence
attack.defense_evasion
attack.t1098
·
Share on:
twitter
facebook
linkedin
copy
to-top