Delete User
Description
delete user module attempts to remove an identity from Entra ID to disable access. Users cannot use this module to remove the identity thats currently being used by MAAD-AF to access Entra ID.
Trigger
MAAD Attack Arsenal -> "Account" -> 8
MITRE ATT&CK Information
| Tactic | Technique |
|---|---|
| Impact | Account Access Removal |
Additional Details
Microsoft services being accessed by this module:
External PowerShell module used: