Delegated Permissions Granted For All Users (a6355fbe-f36f-45d8-8efc-ab42465cbc52)
Detects when highly privileged delegated permissions are granted on behalf of all users
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Steal Application Access Token - T1528 (890c9858-598c-401d-a4d5-c67ebcdd703a) | Attack Pattern | Delegated Permissions Granted For All Users (a6355fbe-f36f-45d8-8efc-ab42465cbc52) | Sigma-Rules | 1 |