Azure AD Account Credential Leaked (19128e5e-4743-48dc-bd97-52e5775af817)
Indicates that the user's valid credentials have been leaked.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Azure AD Account Credential Leaked (19128e5e-4743-48dc-bd97-52e5775af817) | Sigma-Rules | Gather Victim Identity Information - T1589 (5282dd9a-d26d-4e16-88b7-7c0f4553daf4) | Attack Pattern | 1 |