Skip to content
Threat Feed
Subscribe

Product

Privileged Identity Management

2 briefs RSS
high advisory

Entra ID: Global Administrator Role Assigned to PIM User

An adversary may add an account to the Global Administrator role within Azure AD Privileged Identity Management (PIM) to establish persistence and gain privileged access.

Azure Active Directory +1 azure entra_id persistence privilege_escalation
2r 2t
high advisory

Azure AD PIM Role Activation Detection

Detection of Azure AD Privileged Identity Management (PIM) role activation, indicating potential privilege escalation or unauthorized access.

Azure Active Directory +1 azure pim privilege-escalation persistence
2r 2t