Tag
high
advisory
Azure Privileged Identity Management (PIM) Invalid License Detection
2 rules 1 TTPDetection of unauthorized access or privilege escalation attempts within Azure environments due to invalid or missing Microsoft Entra Premium P2 or Microsoft Entra ID Governance licenses for Privileged Identity Management (PIM).
Azure
pim
privileged-identity-management
invalid-license
2r
1t
medium
advisory
Unused Privileged Identity Management (PIM) Roles in Azure
2 rules 1 TTPDetection of assigned but unused privileged roles in Azure's Privileged Identity Management (PIM) service, indicating potential misconfiguration, license overuse, or dormant privileged access that could be exploited.
Azure
pim
privileged-identity-management
role-based-access-control
initial-access
privilege-escalation
2r
1t
medium
advisory
Entra ID Privileged Identity Management (PIM) Role Modified
2 rules 3 TTPsAttackers may modify Entra ID Privileged Identity Management (PIM) roles to persist in the environment and weaken security controls, potentially leading to privilege escalation and unauthorized access.
Entra ID Privileged Identity Management
azure
persistence
privileged-identity-management
2r
3t