Microsoft Entra Token Theft - Part One: Offline Access and Conditional Access
A walkthrough of different Token Theft Scenarios with Detections
Threat Hunting entra microsoft threat hunting
Disclaimer: All research and opinions expressed here are my own and are independent of any employer or organisation.
A walkthrough of different Token Theft Scenarios with Detections
Using Malleable C2 profiles and C2 Concealer to bypass network-based detection of Cobalt Strike beacons