Entra ID

This page contains the Stratus attack techniques for Entra ID, grouped by MITRE ATT&CK Tactic. Note that some Stratus attack techniques may correspond to more than a single ATT&CK Tactic.

Persistence

• Backdoor Entra ID application through service principal

• Backdoor Entra ID application

• Create Guest User

• Create Hidden Scoped Role Assignment Through HiddenMembership AU

• Create Application

• Create Sticky Backdoor User Through Restricted Management AU

Privilege Escalation

• Backdoor Entra ID application through service principal

• Backdoor Entra ID application

• Create Application