Tool

github.com/Flangvik/TeamFiltration

https://github.com/Flangvik/TeamFiltration

Published on: github.com

ATT&CK techniques those detections carry

T1069Permission Groups Discovery
T1069.003Cloud Groups
T1078Valid Accounts
T1078.004Cloud Accounts
T1082System Information Discovery
T1087Account Discovery
T1087.004Cloud Account
T1110Brute Force
+8 more

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Entra ID OAuth user_impersonation Scope for Unusual User and Client	Medium	Elastic detection rules	Sep 20, 2026	Elastic License 2.0
Entra ID Sign-in TeamFiltration User-Agent Detected	High	Elastic detection rules	Sep 20, 2026	Elastic License 2.0

Showing 2 of 2

Filter in the catalogue