Skip to content

Hide Navigation Hide TOC

App Granted Privileged Delegated Or App Permissions (5aecf3d5-f8a0-48e7-99be-3a759df7358f)

Detects when administrator grants either application permissions (app roles) or highly privileged delegated permissions

Cluster A Galaxy A Cluster B Galaxy B Level
App Granted Privileged Delegated Or App Permissions (5aecf3d5-f8a0-48e7-99be-3a759df7358f) Sigma-Rules Additional Cloud Roles - T1098.003 (2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3) Attack Pattern 1
Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern Additional Cloud Roles - T1098.003 (2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3) Attack Pattern 2