ROADTools is a framework for enumerating Azure Active Directory environments. The tool is written in Python and publicly available on GitHub.
| Technique | Procedure example |
|---|---|
| T1018 Remote System Discovery |
ROADTools can enumerate Azure AD systems and devices. |
| T1069.003 Cloud Groups |
ROADTools can enumerate Azure AD groups. |
| T1078.004 Cloud Accounts |
ROADTools leverages valid cloud credentials to perform enumeration operations using the internal Azure AD Graph API. |
| T1087.004 Cloud Account |
ROADTools can enumerate Azure AD users. |
| T1119 Automated Collection |
ROADTools automatically gathers data from Azure AD environments using the Azure Graph API. |
| T1526 Cloud Service Discovery |
ROADTools can enumerate Azure AD applications and service principals. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
