T1528: Steal Application Access Token

T1528: Steal Application Access Token

Adversaries can steal application access tokens as a means of acquiring credentials to access remote systems and resources.

View on MITRE ATT&CK →

Azure Consent To Application

Records consent to an application’s requested permissions.

Cloud Service: Azure - Microsoft Entra ID

Tactics:

Persistence Privilege Escalation Credential Access

Techniques:

T1528T1098

Tags:

Azure Microsoft Entra ID