-
Notifications
You must be signed in to change notification settings - Fork 19
Some new queries #18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Some new queries #18
Conversation
…sions.yml to Accounts related to AAD Entra Connect.yml
…zure Users to Azure VMs.yml
|
@LuemmelSec Thanks for submitting extra queries! :) I'll take a look and fix the included tests - the action doesn't include your additions at this moment. One note in advance: I believe you're missing the '.yml' extension for one of your query files: aa26218 |
Fixed that ;) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@LuemmelSec I see you're refering to m.system_tags but "m" is not declared yet. This should probably be n.system_tags? :)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sharp eye. Probably fd up during copy pasta :)
Updated to also support Microsoft Entra Cloud Sync
Query is redundant as it is a limited scope (only DA) compared to https://queries.specterops.io/?input=18a83a17-b451-4343-acfe-7620516e2968&name=Locations+of+Tier+Zero+%2F+High+Value+objects
queries/Shortest Paths from Owned Azure Users to Azure Keyvaults.yml
Outdated
Show resolved
Hide resolved
|
Hey @LuemmelSec! Thanks a lot for the contribution :) |
Hey bud, nice to see you alive ^^ |
martinsohn
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good! I especially like Accounts related to AAD Entra Connect. Thank you for the contribution (and sorry for the delay!).
Some queries added to the pool.