Logo Microsoft Entra ID - Attack and Defense PlaybookCommunity Playbook
GitHub
Overview
  • Home
Attack & Defense Scenarios
  • Password Spray
  • Consent Grant
  • Service Principals in ADO
  • Entra Connect Sync Account
  • Replay of Primary Refresh Token
  • EID Security Config Analyzer
  • Adversary-in-the-Middle (AiTM)
  • Entra Connect App-based Auth
Appendix
  • Identity Security Monitoring
  • Lateral Movement AD to Entra ID
Reference
  • MITRE ATT&CK Coverage
  • Detection Library
Other Community Tools
  • EntraOps
  • Maester
Playbook / Legal / Privacy

Privacy information

This notice explains data processing when you visit this playbook reader. The controller is Thomas Naunheim; postal address and contact email are in the Impressum.

Hosting

The site is hosted on GitHub Pages. When a page is requested, the browser sends technical request data such as its IP address, requested page, and browser information to GitHub. GitHub states that it logs visitor IP addresses for security. We use hosting to deliver the site reliably and protect it from misuse (Art. 6(1)(f) GDPR). We do not receive or retain the hosting request logs. GitHub determines its own retention periods; see its privacy statement.

External resources

The reader loads syntax-highlighting code and CSS from cdnjs.cloudflare.com (Cloudflare). Pages containing Mermaid diagrams load the diagram library from cdn.jsdelivr.net (jsDelivr). Some upstream chapter pages also load images directly from these external hosts:

  • aka.ms
  • pbs.twimg.com
  • www.cloud-architekt.net

Those requests disclose technical connection data, including the visitor's IP address, to the respective provider. The purpose is to display code, diagrams and images in the chapters (Art. 6(1)(f) GDPR). We do not receive or retain those request logs. The providers determine retention and may process data outside the EEA. See the Cloudflare privacy policy and jsDelivr privacy policy for processing, retention and transfer details. Image hosts publish their own privacy information.

Local preferences and search

When you choose a theme, this site stores eidad-theme in your browser's local storage so the choice is remembered. It remains there until you change the setting or clear site storage. Search runs in the browser using a downloaded index; this site does not send search text to a search server. The reader does not include advertising or analytics scripts.

Links to other services

Links to GitHub, Microsoft Azure, MITRE ATT&CK and other websites open those services when you select them. Their privacy notices apply there. Sending feedback through GitHub requires visiting GitHub.

Your rights

Subject to the legal requirements, you may request access, correction, deletion or restriction of your personal data, receive data you provided in a portable format where applicable, and object to processing based on legitimate interests. You may also lodge a complaint with a data protection supervisory authority. Contact us via the email address in the Impressum. Where a provider processes data independently, its privacy notice explains how to exercise rights with that provider.

Microsoft Entra ID - Attack and Defense Playbook — an independent community project, not affiliated with Microsoft.
Impressum Privacy License & trademarks Contribute on GitHub
    Type to search · ↑↓ to navigate · ↵ to open