Azure Add Application
Creates and registers a new application in Microsoft Entra ID, establishing an identity that can authenticate and request access tokens.
T1136.003: Cloud Account
T1136.003: Cloud Account
Adversaries may create a cloud account to maintain access to victim systems. With a sufficient level of access, such accounts may be used to establish secondary credentialed access that does not require persistent remote access tools to be deployed on the system.
View on MITRE ATT&CK →Azure Add Service Principal
Creates a service principal in Entra ID, representing the identity instance of an application within a tenant.
Azure Add User
Creates a new user account in Microsoft Entra ID.
AWS CreateAccount
Creates a new AWS account as a member of an AWS Organization under the management account.
AWS CreateUser
Creates a new IAM user in the AWS account for programmatic or console-based access.
Azure Invite External User
Sends a B2B guest invitation to an external user, granting them access to the tenant's resources.