INFO

A repository of all the use cases in Enterprise Exposure Graph:

• Fundamentals KQL
• Get all Owners roles in Azure
• Get all Owners and Contributer roles
• Get all roles on managed identities
• Internet facing devices with a privilege escalation vulnerability
• VMs exposed to the internet with an RCE vulnerability
• Devices exposed to the internet with an RCE vulnerability
• All devices with user credentials with attribute Admincount
• Show client devices with a critical vulnerability/users that have access to high value servers!
• OAuth applications with Microsoft Graph permissions
• Service Principals permissions to Azure resources