Overview - MISP Tags
| Details | Value | Category | Type | Misp type |
|---|---|---|---|---|
| Details | AZT403 - Local Resource Hijack | atrm | atrm | Cluster |
| Details | AZT404 - Principal Impersonation | atrm | atrm | Cluster |
| Details | AZT404.1 - Function Application | atrm | atrm | Cluster |
| Details | AZT404.2 - Logic Application | atrm | atrm | Cluster |
| Details | AZT404.3 - Automation Account | atrm | atrm | Cluster |
| Details | AZT404.4 - App Service | atrm | atrm | Cluster |
| Details | AZT405 - Azure AD Application | atrm | atrm | Cluster |
| Details | AZT405.1 - Application API Permissions | atrm | atrm | Cluster |
| Details | AZT405.2 - Application Role | atrm | atrm | Cluster |
| Details | AZT405.3 - Application Registration Owner | atrm | atrm | Cluster |
| Details | AZT501 - Account Manipulation | atrm | atrm | Cluster |
| Details | AZT501.1 - User Account Manipulation | atrm | atrm | Cluster |
| Details | AZT501.2 - Service Principal Manipulation | atrm | atrm | Cluster |
| Details | AZT501.3 - Azure VM Local Administrator Manipulation | atrm | atrm | Cluster |
| Details | AZT502 - Account Creation | atrm | atrm | Cluster |
| Details | AZT502.1 - User Account Creation | atrm | atrm | Cluster |
| Details | AZT502.2 - Service Principal Creation | atrm | atrm | Cluster |
| Details | AZT502.3 - Guest Account Creation | atrm | atrm | Cluster |
| Details | AZT503 - HTTP Trigger | atrm | atrm | Cluster |
| Details | AZT503.1 - Logic Application HTTP Trigger | atrm | atrm | Cluster |
| Details | AZT503.2 - Function App HTTP Trigger | atrm | atrm | Cluster |
| Details | AZT503.3 - Runbook Webhook | atrm | atrm | Cluster |
| Details | AZT503.4 - WebJob | atrm | atrm | Cluster |
| Details | AZT504 - Watcher Tasks | atrm | atrm | Cluster |
| Details | AZT505 - Scheduled Jobs | atrm | atrm | Cluster |