Some new queries #18
Some new queries #18
Conversation
…sions.yml to Accounts related to AAD Entra Connect.yml
…zure Users to Azure VMs.yml
|
@LuemmelSec Thanks for submitting extra queries! :) I'll take a look and fix the included tests - the action doesn't include your additions at this moment. One note in advance: I believe you're missing the '.yml' extension for one of your query files: aa26218 |
Fixed that ;) |
There was a problem hiding this comment.
@LuemmelSec I see you're refering to m.system_tags but "m" is not declared yet. This should probably be n.system_tags? :)
There was a problem hiding this comment.
Sharp eye. Probably fd up during copy pasta :)
Updated to also support Microsoft Entra Cloud Sync
Query is redundant as it is a limited scope (only DA) compared to https://queries.specterops.io/?input=18a83a17-b451-4343-acfe-7620516e2968&name=Locations+of+Tier+Zero+%2F+High+Value+objects
Some queries added to the pool.