Overview - MISP Tags
| Details | Value | Category | Type | Misp type |
|---|---|---|---|---|
| Details | AZT106.2 - Gather Application Role Information | atrm | atrm | Cluster |
| Details | AZT106.3 - Gather Azure Resources Role Assignments | atrm | atrm | Cluster |
| Details | AZT107 - Gather Resource Data | atrm | atrm | Cluster |
| Details | AZT108 - Gather Victim Data | atrm | atrm | Cluster |
| Details | AZT201 - Valid Credentials | atrm | atrm | Cluster |
| Details | AZT201.1 - User Account | atrm | atrm | Cluster |
| Details | AZT201.2 - Service Principal | atrm | atrm | Cluster |
| Details | AZT202 - Password Spraying | atrm | atrm | Cluster |
| Details | AZT203 - Malicious Application Consent | atrm | atrm | Cluster |
| Details | AZT301 - Virtual Machine Scripting | atrm | atrm | Cluster |
| Details | AZT301.1 - RunCommand | atrm | atrm | Cluster |
| Details | AZT301.2 - CustomScriptExtension | atrm | atrm | Cluster |
| Details | AZT301.3 - Desired State Configuration | atrm | atrm | Cluster |
| Details | AZT301.4 - Compute Gallery Application | atrm | atrm | Cluster |
| Details | AZT301.5 - AKS Command Invoke | atrm | atrm | Cluster |
| Details | AZT301.6 - Vmss Run Command | atrm | atrm | Cluster |
| Details | AZT301.7 - Serial Console | atrm | atrm | Cluster |
| Details | AZT302 - Serverless Scripting | atrm | atrm | Cluster |
| Details | AZT302.1 - Automation Account Runbook Hybrid Worker Group | atrm | atrm | Cluster |
| Details | AZT302.2 - Automation Account Runbook RunAs Account | atrm | atrm | Cluster |
| Details | AZT302.3 - Automation Account Runbook Managed Identity | atrm | atrm | Cluster |
| Details | AZT302.4 - Function Application | atrm | atrm | Cluster |
| Details | AZT303 - Managed Device Scripting | atrm | atrm | Cluster |
| Details | AZT401 - Privileged Identity Management Role | atrm | atrm | Cluster |
| Details | AZT402 - Elevated Access Toggle | atrm | atrm | Cluster |