List Accounts in Tenant
Description
list accounts in tenant module performs reconnaissance in the connected Entra ID tenant to lists all accounts in it. If the result is too large to display, this module dumps the accounts found into \Outputs directory.
Trigger
MAAD Attack Arsenal -> "Account" -> 1
MITRE ATT&CK Information
| Tactic | Technique |
|---|---|
| Discovery | Account Discovery: Cloud Account |
Additional Details
Microsoft services being accessed by this module:
External PowerShell module used: