Update azure_mfasweep_events.yml

splunk · Jan 6, 2025 · 2109cb0 · 2109cb0
1 parent 8aa030d
commit 2109cb0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/datasets/attack_techniques/T1110/azure_mfasweep_events/azure_mfasweep_events.yml b/datasets/attack_techniques/T1110/azure_mfasweep_events/azure_mfasweep_events.yml
@@ -1,5 +1,5 @@
 author: Steven Dick
-id: 35cffd75-1e1c-4837-a886-94c4ebf79f62
+id: 27ba7e07-280e-4890-9b31-f2060d86f4c6
 date: '2024-12-19'
 description: 'Sample of MFA Sweep events used to enumerate Azure/Entra/o365 MFA weaknesses.'
 environment: attack_range
@@ -11,4 +11,4 @@ references:
 - https://attack.mitre.org/techniques/T1110
 - https://www.blackhillsinfosec.com/exploiting-mfa-inconsistencies-on-microsoft-services/
 - https://sra.io/blog/msspray-wait-how-many-endpoints-dont-have-mfa/
-- https://github.com/dafthack/MFASweep/tree/master
+- https://github.com/dafthack/MFASweep/tree/master