Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Microsoft Entra ID
FIN-669
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Not Verified
What It Detects
This Entra ID user account is disabled. Disabled accounts that remain in the directory may retain role assignments, application consent grants, and group memberships. If re-enabled without review, these residual privileges can be exploited.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
User Disabled (True/False)
equals
True
Connectors
match
Entra
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum