ROADTools — Malware Profile

ROADTools is a framework for enumerating Azure Active Directory environments. The tool is written in Python and publicly available on GitHub.

MITRE ATT&CK techniques (6)

• T1018 Remote System Discovery
• T1069.003 Cloud Groups
• T1078.004 Cloud Accounts
• T1087.004 Cloud Account
• T1119 Automated Collection
• T1526 Cloud Service Discovery

Attributed threat actors

• APT29

Read the full analysis on IntelFusions