Update azure_device_or_configuration_modified_or_deleted.yml

Added technique and sub-tech, along with references.
2023-01-09 15:32:02 -05:00
parent 8e38593f2f
commit 57a23e0b41
1 changed files with 4 additions and 0 deletions
@@ -4,11 +4,15 @@ status: test
 description: Identifies when a device or device configuration in azure is modified or deleted.
 references:
    - https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-audit-activities#core-directory
+    - https://attack.mitre.org/techniques/T1485
+    - https://attack.mitre.org/techniques/T1565/001
 author: Austin Songer @austinsonger
 date: 2021/09/03
 modified: 2022/10/09
 tags:
    - attack.impact
+    - attack.1485
+    - attack.t1565.001
 logsource:
    product: azure
    service: activitylogs