Rule Info
Name
Certificate-Based Authentication Enabled
Author
Harjot Shah Singh, '@cyb3rjy0t'
Description
Detects when certificate based authentication has been enabled in an Azure Active Directory tenant.
Reference
Date
2024-03-26 00:00:00
Modified
None
Id
c2496b41-16a9-4016-a776-b23f8910dc58
Tags
attack.persistence attack.privilege-escalation attack.t1556 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR