Search/AADInternals
● Malware

AADInternals

AADInternals is a PowerShell-based framework for administering, enumerating, and exploiting Azure Active Directory. The tool is publicly available on GitHub.

View graph Watch Export
Indicators tracked
0
Intelligence Reports30
30 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Connections
26 relationships
T1069.003: Cloud Groups
source
T1003.004: LSA Secrets
source
T1606.002: SAML Tokens
source
T1484.002: Trust Modification
source
T1566.002: Spearphishing Link
source
T1598.003: Spearphishing Link
source
T1530: Data from Cloud Storage
source
T1556.007: Hybrid Identity
source
T1112: Modify Registry
source
T1552.004: Private Keys
source
T1589.002: Email Addresses
source
T1649: Steal or Forge Authentication Certificates
source
T1098.005: Device Registration
source
T1552.001: Credentials In Files
source
T1528: Steal Application Access Token
source
T1087.004: Cloud Account
source
T1059.001: PowerShell
source
T1136.003: Cloud Account
source
T1048: Exfiltration Over Alternative Protocol
source
T1556.006: Multi-Factor Authentication
source
T1558.002: Silver Ticket
source
T1651: Cloud Administration Command
source
T1526: Cloud Service Discovery
source
T1590.001: Domain Properties
source