1. Home
  2. Matrices
  3. Enterprise
  4. Azure AD

Azure AD Matrix

Below are the tactics and techniques representing the MITRE ATT&CK® Matrix for Enterprise covering cloud-based techniques. The Matrix contains information for the Azure AD platform.

View on the ATT&CK® Navigator
Version Permalink
Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Impact
1 techniques 1 techniques 4 techniques 4 techniques 4 techniques 8 techniques 4 techniques 2 techniques
Valid Accounts (2)
=
Command and Scripting Interpreter (1)
=
Account Manipulation (3)
=
Create Account (1)
=
Modify Authentication Process (3)
=
Valid Accounts (2)
=
Abuse Elevation Control Mechanism (1)
=
Account Manipulation (3)
=
Domain or Tenant Policy Modification (1)
=
Valid Accounts (2)
=
Abuse Elevation Control Mechanism (1)
=
Domain or Tenant Policy Modification (1)
=
Modify Authentication Process (3)
=
Valid Accounts (2)
=
Brute Force (4)
=
Exploitation for Credential Access
Forge Web Credentials (1)
=
Modify Authentication Process (3)
=
Multi-Factor Authentication Request Generation
Steal Application Access Token
Steal or Forge Authentication Certificates
Unsecured Credentials
Account Discovery (1)
=
Cloud Service Dashboard
Cloud Service Discovery
Permission Groups Discovery (1)
=
Endpoint Denial of Service (3)
=
Network Denial of Service (2)
=
Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Impact
1 techniques 1 techniques 4 techniques 4 techniques 4 techniques 8 techniques 4 techniques 2 techniques
=
Valid Accounts (2)
=
Command and Scripting Interpreter (1)
=
Account Manipulation (3)
=
Create Account (1)
=
Modify Authentication Process (3)
=
Valid Accounts (2)
=
Abuse Elevation Control Mechanism (1)
=
Account Manipulation (3)
=
Domain or Tenant Policy Modification (1)
=
Valid Accounts (2)
=
Abuse Elevation Control Mechanism (1)
=
Domain or Tenant Policy Modification (1)
=
Modify Authentication Process (3)
=
Valid Accounts (2)
=
Brute Force (4)
Exploitation for Credential Access
=
Forge Web Credentials (1)
=
Modify Authentication Process (3)
Multi-Factor Authentication Request Generation
Steal Application Access Token
Steal or Forge Authentication Certificates
Unsecured Credentials
=
Account Discovery (1)
Cloud Service Dashboard
Cloud Service Discovery
=
Permission Groups Discovery (1)
=
Endpoint Denial of Service (3)
=
Network Denial of Service (2)