A collection of multiple user accounts that share the same access rights to the computer and/or network resources and have common security rights[1]
An extracted list of available groups and/or their associated settings (ex: AWS list-groups)
An extracted list of available groups and/or their associated settings (ex: AWS list-groups)
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1069 | Permission Groups Discovery | |
| .003 | Cloud Groups | ||
Contextual data about a group which describes group and activity around it, such as name, permissions, or user accounts within the group
Contextual data about a group which describes group and activity around it, such as name, permissions, or user accounts within the group
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1069 | Permission Groups Discovery | |
| .003 | Cloud Groups | ||
Changes made to a group, such as membership, name, or permissions (ex: Windows EID 4728 or 4732, AWS IAM UpdateGroup)
Changes made to a group, such as membership, name, or permissions (ex: Windows EID 4728 or 4732, AWS IAM UpdateGroup)
| Domain | ID | Name | |
|---|---|---|---|
| Enterprise | T1098 | Account Manipulation | |
| .002 | Exchange Email Delegate Permissions | ||