Primary Refresh Token Access Attempt (a84fc3b1-c9ce-4125-8e74-bdcdb24021f1)

Indicates access attempt to the PRT resource which can be used to move laterally into an organization or perform credential theft

Rows: 1
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.2
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Cluster A	Galaxy A	Cluster B	Galaxy B	Level
	Clear Sigma-Rules		Clear Attack Pattern	Clear 1
Primary Refresh Token Access Attempt (a84fc3b1-c9ce-4125-8e74-bdcdb24021f1)	Sigma-Rules	Steal Application Access Token - T1528 (890c9858-598c-401d-a4d5-c67ebcdd703a)	Attack Pattern	1