Home/ MITRE Matrix/ Discovery/ T1087.004

T1087.004Cloud Account

T1087.004 — Cloud Account is a MITRE ATT&CK technique in the Discovery tactic. Clankerusecase tracks 6 detection use cases covering it and 1 threat-intel article citing it.

Discovery

View on the matrix → Filter Detection Library MITRE official spec ↗

6Use cases

1Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1087 · Account Discovery

Use cases covering this technique (6)

AWS root account activity (any action) Internal delivery · alerting DDCW Okta IDP Lifecycle Modifications ESCU actions · hunting P Okta Unauthorized Access to Application ESCU actions · hunting P Azure AD AzureHound UserAgent Detected ESCU actions · alerting P Azure AD Service Principal Enumeration ESCU actions · alerting P [LLM] First-time Entra directory enumeration via Graph/PowerShell CLI tooling by a user Bespoke actions · hunting DSPDD

Articles citing this technique (1)

high Hacker claims 3.6 million Azure account records stolen from major companies art-06