# AAD

- [Useful Links](/red-teaming/notes/aad/useful-links.md)
- [Overview of Azure & M365](/red-teaming/notes/aad/overview-of-azure-and-m365.md)
- [Enumerate Users and Domains](/red-teaming/notes/aad/enumerate-users-and-domains.md)
- [Post-exploitation Reconnaissance](/red-teaming/notes/aad/post-exploitation-reconnaissance.md)
- [OAuth 2.0 Abuse](/red-teaming/notes/aad/oauth-2.0-abuse.md)
- [Abusing Device Code Authentication](/red-teaming/notes/aad/abusing-device-code-authentication.md)
- [Abusing Cloud Administrator Role](/red-teaming/notes/aad/abusing-cloud-administrator-role.md)
- [Abusing User Administrator Role](/red-teaming/notes/aad/abusing-user-administrator-role.md)
- [AAD Federated Backdoor](/red-teaming/notes/aad/aad-federated-backdoor.md)
- [Service Principal Abuse](/red-teaming/notes/aad/service-principal-abuse.md)
- [Compromising Azure Blobs and Storage Accounts](/red-teaming/notes/aad/compromising-azure-blobs-and-storage-accounts.md)
- [Malicious Device Join](/red-teaming/notes/aad/malicious-device-join.md)
- [Disabling Auditing (Unified Audit Logs)](/red-teaming/notes/aad/disabling-auditing-unified-audit-logs.md)
- [Spoofing Azure Sign-In Logs](/red-teaming/notes/aad/spoofing-azure-sign-in-logs.md)
- [Registering Fake Agents for Log Spoofing](/red-teaming/notes/aad/registering-fake-agents-for-log-spoofing.md)
- [Pass the PRT](/red-teaming/notes/aad/pass-the-prt.md)
- [Pass the Cookie](/red-teaming/notes/aad/pass-the-cookie.md)
- [Abusing Managed Identities](/red-teaming/notes/aad/abusing-managed-identities.md)
- [Virtual Machine Abuse](/red-teaming/notes/aad/virtual-machine-abuse.md)
- [Attacking Key Vaults](/red-teaming/notes/aad/attacking-key-vaults.md)
