Documentation Index
Fetch the complete documentation index at: https://specterops-enable-tls-feedback.mintlify.app/llms.txt
Use this file to discover all available pages before exploring further.
AZOwns targets resources in Entra ID (for example AZGroup, AZServicePrincipal, and AZDevice) from various object-specific ownership.
The edges
AZOwner and
AZOwns are distinct as they each apply their own distinct identity and access management platform (AzureRM and Entra ID respectively) with distinct mechanics, abuse primitives, and remediation steps.
Abuse Info
Object ownership means almost all abuses are possible against the target object.
Opsec Considerations
This depends on which abuse you perform, but in general Azure will create a log for each abuse action.
References
https://specterops.io/blog/2022/08/03/introducing-bloodhound-4-2-the-azure-refactor/
