Dirk-jan Mollema. (2020, April 16). Introducing ROADtools - The Azure AD exploration framework. Retrieved January 31, 2022.
Not cited by any technique.
None recorded.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1018 Remote System Discovery |
ToolROADTools | ROADTools can enumerate Azure AD systems and devices. |
| T1069.003 Cloud Groups |
ToolROADTools | ROADTools can enumerate Azure AD groups. |
| T1078.004 Cloud Accounts |
ToolROADTools | ROADTools leverages valid cloud credentials to perform enumeration operations using the internal Azure AD Graph API. |
| T1087.004 Cloud Account |
ToolROADTools | ROADTools can enumerate Azure AD users. |
| T1119 Automated Collection |
ToolROADTools | ROADTools automatically gathers data from Azure AD environments using the Azure Graph API. |
| T1526 Cloud Service Discovery |
ToolROADTools | ROADTools can enumerate Azure AD applications and service principals. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
