mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-24 13:40:57 +03:00
929 B
929 B
Azure Service Principal Abuse Detection Template
Investigation Checklist
| Check | Status | Notes |
|---|---|---|
| Recent credential additions (7 days) | [ ] | |
| Privileged role assignments to SPs | [ ] | |
| Application ownership review | [ ] | |
| Sign-in anomalies for SPs | [ ] | |
| Admin consent grants review | [ ] | |
| OAuth permission escalation | [ ] |
Affected Service Principals
| Display Name | App ID | Object ID | Finding Type | Severity |
|---|---|---|---|---|
Remediation Actions
| Action | Status | Completed By | Date |
|---|---|---|---|
| Rotate compromised credentials | [ ] | ||
| Remove unauthorized role assignments | [ ] | ||
| Disable compromised service principal | [ ] | ||
| Review and restrict app ownership | [ ] | ||
| Enable Conditional Access for workload identities | [ ] |