Detect Excessive User Account Lockouts
Valid Accounts, Local Accounts
Valid Accounts, Local Accounts
Account Manipulation, Additional Email Delegate Permissions
Valid Accounts, Domain Accounts
Local Account, Create Account
Local Account, Create Account
Modify Authentication Process, Multi-Factor Authentication
Account Manipulation, Device Registration
Brute Force
Modify Cloud Compute Configurations
DCSync, OS Credential Dumping
DCSync, OS Credential Dumping
Multi-Factor Authentication Request Generation, Multi-Factor Authentication, Device Registration
Impair Defenses, Disable or Modify Cloud Logs
Modify Registry
Disable or Modify Tools
Domain or Tenant Policy Modification
Valid Accounts, Default Accounts
Account Manipulation
Rogue Domain Controller
Steal or Forge Kerberos Tickets, AS-REP Roasting
Cloud Accounts, Valid Accounts
Valid Accounts
Valid Accounts
Cloud Accounts, Valid Accounts
Cloud Accounts, Valid Accounts
Valid Accounts
Unused/Unsupported Cloud Regions
Cloud Accounts, Valid Accounts
Cloud Accounts, Valid Accounts
Valid Accounts
Cloud Accounts, Valid Accounts