EXPLORE
← Back to Explore
T1484.002

Trust Modification

Adversaries may add new domain trusts, modify the properties of existing domain trusts, or otherwise change the configuration of trust relationships between domains and tenants to evade defenses and/or elevate privileges.Trust details, such as whether or not user identities are federated, allow authentication and authorization properties to apply between domains or tenants for the purpose of accessing shared resources.(Citation: Microsoft - Azure AD Federation) These trust objects may include ac...

Identity ProviderWindows
14
Detections
4
Sources
2
Threat Actors

BY SOURCE

9elastic3splunk_escu1kql1sigma

PROCEDURES (8)

General Monitoring4 detections

Auto-extracted: 4 detections for general monitoring

Token2 detections

Auto-extracted: 2 detections for token

Impersonat2 detections

Auto-extracted: 2 detections for impersonat

Service2 detections

Auto-extracted: 2 detections for service

Azure1 detections

Auto-extracted: 1 detections for azure

Aws1 detections

Auto-extracted: 1 detections for aws

Api1 detections

Auto-extracted: 1 detections for api

Network Connection Monitoring1 detections

Auto-extracted: 1 detections for network connection monitoring

DETECTIONS (14)