Multi-service network exposure followed by key and data access

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Identifies likely impact progression where network exposure writes across multiple cloud services are followed by secret or data access operations.

Attribute Value
Type Hunting Query
Solution Hybrid Attack - Cloud & Identity
ID baebef19-9013-4e90-8511-92c036ca2710
Tactics DefenseEvasion, CredentialAccess, Collection
Techniques T1562.007, T1552, T1213
Required Connectors AzureActivity
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
AzureActivity

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries · Back to Hybrid Attack - Cloud & Identity