MITRE ATT&CK technique · Discovery

`T1069.003` Cloud Groups

Sub-technique of T1069 Permission Groups Discovery

Adversaries may attempt to find cloud groups and permission settings. The knowledge of cloud permission groups can help adversaries determine the particular roles of users and groups within an environment, as well as which users are associated with a particular group. With authenticated access there are several tools that can be used to find permissions groups. The Get-MsolRole PowerShell cmdlet…

MITRE ATT&CK page ↗

Who uses it · with stories on Jábega

ShinyHunters

Sigma rules to hunt it

SigmaHQ has no rules for this technique.

Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.