AZT701 - SAS URI Generation#
By generating an SAS URI for a resource, an adversary may extract the contents of that resource without authentication at any time.
ID | Name | Description | Action | Resources |
---|---|---|---|---|
AZT701.1 | VM Disk SAS URI | An adversary may create an SAS URI to download a VM disk attached to a virtual machine. | Microsoft.Compute/disks/beginGetAccess/action | Virtual Machine Disk |
AZT701.2 | Storage Account File Share SAS | By generating a Shared Access Signature (SAS) URI, an adversary can access a container in a Storage Account at any time. | Microsoft.Storage/storageAccounts/listAccountSas/action | Azure Storage Account |