T1087.004Discovery
Cloud Account
Adversaries may attempt to get a listing of cloud accounts. Cloud accounts are those created and configured by an organization for use by users, remote support, services, or for administration of resources within a cloud service provider or SaaS application. With authenticated access there are several tools that can be used to find accounts. The Get-MsolRoleMember PowerShell cmdlet can be used…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
3 Sigma rules tagged T1087.004Cloud AccountT1087.0043 general rules
- Discovery Using AzureHoundhightest
- AWS STS GetCallerIdentity Enumeration Via TruffleHogmediumexperimental
- RBAC Permission Enumeration Attemptlowtest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Cloud Account
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.