Investigate misuse of application identities in Microsoft Entra ID using audit and sign-in logs. Provides detection queries and investigation steps for suspicious credential additions, privileged role assignments, consent grants, and service principal enumeration.
中文简介正在准备中。当前显示英语简介。
- Investigating suspicious additions of application credentials
- Reviewing privileged roles assigned to application identities
- Building detection rules for Entra ID identity abuse
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新
Execute lateral movement within Microsoft Entra ID (formerly Azure AD) and Microsoft 365 environments. Use this skill to traverse cloud resources using compromised user tokens, managed identities, Primary Refresh Tokens (PRT), and application permissions (Service Principals) to achieve Global Administrator access.
中文简介正在准备中。当前显示原文说明。
ShulkwiSEC/bb-huge☆ 232026年7月11日 更新
tespit etmeand Araştır: Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.
中文简介正在准备中。当前显示原文说明。
MustafaKemal0146/fetih☆ 52026年10月11日 更新