Azure AD Connect

Reported Context (1)

Full multi-site Active Directory compromise, Azure AD Connect sync-account hash captured, mapped certificate-based escalation path Exposed Directory Reveals Aurora Affiliate’s Attacks on More Than 20 Organizations

Malware (1)

MITRE ATT&CK (11)

Products (6)

Tools (17)

Industries (8)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.