Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments

🗓️ 15 Apr 2021 12:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 80 Views

Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments. Alert addresses APT actor's activity in Microsoft 365/Azure environments, compromising federated identity solutions and using forged authentication tokens

Source	Link
facebook	www.facebook.com/sharer/sharer.php
twitter	www.twitter.com/intent/tweet
linkedin	www.linkedin.com/sharing/share-offsite/
	www.
attack	www.attack.mitre.org/versions/v7/techniques/enterprise/
whitehouse	www.whitehouse.gov/briefing-room/statements-releases/2021/04/15/fact-sheet-imposing-costs-for-harmful-foreign-activities-by-the-russian-government/
us-cert	www.us-cert.cisa.gov/remediating-apt-compromised-networks
cisa	www.cisa.gov/supply-chain-compromise
us-cert	www.us-cert.cisa.gov/ncas/alerts/aa20-352a
attack	www.attack.mitre.org/versions/v8/tactics/TA0001/

15 Apr 2021 12:00Current

9.5High risk

Vulners AI Score9.5