Skip to content
Beyond the Perimeter How an On-Premises Domain Admin Compromise Unlocked the Cloud
labs.cognisys.group | research | #cloud | #cloud-security | #active-directory | #red-team | #azure | #mfa-bypass | #token-theft
Summary
A red-team case study: after an on-premises Domain Admin compromise, operators dumped Office session tokens, bypassed MFA, and pivoted into the cloud as Global Administrator on Entra ID.
- Published
- Collected