Common Information
| Type | Value |
|---|---|
| Value |
AZT302.2 - Automation Account Runbook RunAs Account |
| Category | Atrm |
| Type | Atrm |
| Misp Type | Cluster |
| Description | By utilizing an Automation Account configured with a RunAs account, an attacker can execute commands on an Azure VM via RunCommand [(AZT301.1)](../AZT301/AZT301-1.md) if that service principal has the correct role and privileges. |