EXPLORE
← Back to Explore
T1087.004

Cloud Account

Adversaries may attempt to get a listing of cloud accounts. Cloud accounts are those created and configured by an organization for use by users, remote support, services, or for administration of resources within a cloud service provider or SaaS application. With authenticated access there are several tools that can be used to find accounts. The <code>Get-MsolRoleMember</code> PowerShell cmdlet can be used to obtain account names given a role or permissions group in Office 365.(Citation: Micros...

IaaSIdentity ProviderOffice SuiteSaaS
13
Detections
3
Sources
2
Threat Actors

BY SOURCE

6elastic4splunk_escu3sigma

PROCEDURES (9)

Credential3 detections

Auto-extracted: 3 detections for credential

Azure2 detections

Auto-extracted: 2 detections for azure

Cloud2 detections

Auto-extracted: 2 detections for cloud

Azure1 detections

Auto-extracted: 1 detections for azure

Cloud1 detections

Auto-extracted: 1 detections for cloud

Service1 detections

Auto-extracted: 1 detections for service

Api1 detections

Auto-extracted: 1 detections for api

Credential1 detections

Auto-extracted: 1 detections for credential

Service1 detections

Auto-extracted: 1 detections for service

THREAT ACTORS (2)

DETECTIONS (13)