Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added import of "Group Types" and "Membership Rule" for AZGroups #647

Merged
merged 1 commit into from
May 1, 2023

Conversation

ahazu
Copy link
Contributor

@ahazu ahazu commented Feb 20, 2023

These are useful when looking for privilege escalation vectors (see https://www.mnemonic.io/resources/blog/abusing-dynamic-groups-in-azure-ad-for-privilege-escalation/).

Listing all dynamic groups can be done with MATCH (g:AZGroup) WHERE any(gt IN g.groupTypes WHERE gt = "DynamicMembership") RETURN g

@github-actions
Copy link

github-actions bot commented Feb 20, 2023

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

@ahazu
Copy link
Contributor Author

ahazu commented Feb 20, 2023

I have read the CLA Document and I hereby sign the CLA

@ahazu
Copy link
Contributor Author

ahazu commented Feb 20, 2023

recheck

@JonasBK JonasBK changed the base branch from master to 4.3.1 May 1, 2023 14:25
@JonasBK JonasBK merged commit e2bc162 into SpecterOps:4.3.1 May 1, 2023
@github-actions github-actions bot locked and limited conversation to collaborators May 1, 2023
@JonasBK
Copy link
Contributor

JonasBK commented May 1, 2023

Nice one. Thanks for your contribution @ahazu!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants