Hidden in Plain Sight: Abusing Entra ID Administrative Units for Sticky Persistence

This research was presented at fwd:cloudsec Europe on September 17, 2024. You can find the slides here. The recording of the talk will be available in the coming days. Key points Entra ID Administrative Units (AUs) allow scoped role assignment of an...