Changes to Application Ownership

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Detects changes to the ownership of an appplicaiton. Monitor these changes to make sure that they were authorized. Ref: https://learn.microsoft.com/en-gb/entra/architecture/security-operations-applications#new-owner

Attribute Value
Type Analytic Rule
Solution Standalone Content
ID cc5780ce-3245-4bba-8bc1-e9048c2257ce
Severity Medium
Kind Scheduled
Tactics Persistence, PrivilegeEscalation
Techniques T1078.004
Required Connectors AzureActiveDirectory
Source View on GitHub

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Analytic Rules