Update rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml

terrancedejesus · web-flow · commit e708a969465e · 2025-11-10T08:57:12.000-05:00
diff --git a/rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml b/rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml
@@ -54,7 +54,7 @@ The Microsoft 365 Global Administrator role grants comprehensive administrative
 references = [
     "https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-administrator",
     "https://learn.microsoft.com/en-us/purview/audit-log-activities",
-    "https://www.blackhat.com/us-24/briefings/schedule/#unoauthorized-a-technique-to-privilege-escalation-to-global-administrator-39231",
+    "https://www.blackhat.com/us-24/briefings/schedule/#unoauthorized-a-technique-to-privilege-escalation-to-global-administrator-39231"
 ]
 risk_score = 47
 rule_id = "88671231-6626-4e1b-abb7-6e361a171fbb"

Original file line number	Diff line number	Diff line change
`@@ -54,7 +54,7 @@ The Microsoft 365 Global Administrator role grants comprehensive administrative`
`54`	`54`	`references = [`
`55`	`55`	`"https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-administrator",`
`56`	`56`	`"https://learn.microsoft.com/en-us/purview/audit-log-activities",`
`57`		`- "https://www.blackhat.com/us-24/briefings/schedule/#unoauthorized-a-technique-to-privilege-escalation-to-global-administrator-39231",`
	`57`	`+ "https://www.blackhat.com/us-24/briefings/schedule/#unoauthorized-a-technique-to-privilege-escalation-to-global-administrator-39231"`
`58`	`58`	`]`
`59`	`59`	`risk_score = 47`
`60`	`60`	`rule_id = "88671231-6626-4e1b-abb7-6e361a171fbb"`