NFS access

Info

ID: MS-T827
Tactic: InitialAcess
MITRE technique:

Attackers may perform initial access to a storage account using NFS protocol where enabled. While access is restricted to a list of allowed virtual networks that are configured on the storage account firewall, connection via NFS protocol does not require authentication and can be performed by any source on the specified networks.