Overview - MISP Tags
| Details | Value | Category | Type | Misp type |
|---|---|---|---|---|
| Details | AZT506 - Network Security Group Modification | atrm | atrm | Cluster |
| Details | AZT507 - External Entity Access | atrm | atrm | Cluster |
| Details | AZT507.1 - Azure Lighthouse | atrm | atrm | Cluster |
| Details | AZT507.2 - Microsoft Partners | atrm | atrm | Cluster |
| Details | AZT507.3 - Subscription Hijack | atrm | atrm | Cluster |
| Details | AZT507.4 - Domain Trust Modification | atrm | atrm | Cluster |
| Details | AZT508 - Azure Policy | atrm | atrm | Cluster |
| Details | AZT601 - Steal Managed Identity JsonWebToken | atrm | atrm | Cluster |
| Details | AZT601.1 - Virtual Machine IMDS Request | atrm | atrm | Cluster |
| Details | AZT601.2 - Azure Kubernetes Service IMDS Request | atrm | atrm | Cluster |
| Details | AZT601.3 - Logic Application JWT PUT Request | atrm | atrm | Cluster |
| Details | AZT601.4 - Function Application JWT GET Request | atrm | atrm | Cluster |
| Details | AZT601.5 - Automation Account Runbook | atrm | atrm | Cluster |
| Details | AZT602 - Steal Service Principal Certificate | atrm | atrm | Cluster |
| Details | AZT603 - Service Principal Secret Reveal | atrm | atrm | Cluster |
| Details | AZT604 - Azure KeyVault Dumping | atrm | atrm | Cluster |
| Details | AZT604.1 - Azure KeyVault Secret Dump | atrm | atrm | Cluster |
| Details | AZT604.2 - Azure KeyVault Certificate Dump | atrm | atrm | Cluster |
| Details | AZT604.3 - Azure KeyVault Key Dump | atrm | atrm | Cluster |
| Details | AZT605 - Resource Secret Reveal | atrm | atrm | Cluster |
| Details | AZT605.1 - Storage Account Access Key Dumping | atrm | atrm | Cluster |
| Details | AZT605.2 - Automation Account Credential Secret Dump | atrm | atrm | Cluster |
| Details | AZT605.3 - Resource Group Deployment History Secret Dump | atrm | atrm | Cluster |
| Details | AZT701 - SAS URI Generation | atrm | atrm | Cluster |
| Details | AZT701.1 - VM Disk SAS URI | atrm | atrm | Cluster |