OAuth App Privilege Escalation: The Backdoor That Survives a Password Reset
What we’re detecting This detection identifies a two-event chain in Microsoft Entra ID that, taken together, indicates a classic pattern of privilege…
Tag: NIST CSF
NIST CSF 2.0 mapped to the Microsoft Defender suite
A lot of companies own the full Microsoft security stack and still can’t say what it protects. They pay for Defender for…
MFA Fatigue
What we’re detecting This detection identifies a possible MFA Fatigue attack (also known as MFA Bombing), where an attacker already holds the…