Skip to content

Instantly share code, notes, and snippets.

@invictus-korstiaan

invictus-korstiaan/Invoke-InjectOAuthApp.csv

Last active October 27, 2023 09:35
Show Gist options
  • Save invictus-korstiaan/703ea350e655b3043e97f9fd9244fd2d to your computer and use it in GitHub Desktop.
Save invictus-korstiaan/703ea350e655b3043e97f9fd9244fd2d to your computer and use it in GitHub Desktop.
Download ZIP
Invoke-InjectOAuthApp
Raw
Invoke-InjectOAuthApp.csv
Log source Indicator
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/applications/{ID}/addPassword
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/applications
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/servicePrincipals{ID}
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/servicePrincipals?$skiptoken={TOKEN}
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/servicePrincipals
Entra ID Audit Log Update application
Entra ID Audit Log Update application – Certificates and secrets management
Entra ID Audit Log Add application
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment