Skip to content

fix: Query updates for owned clauses #47

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
martinsohn wants to merge 12 commits into
base: main
Choose a base branch
from
Open

fix: Query updates for owned clauses #47

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
6ff4c2f
Update Map Azure Management structure.yml
martinsohn Oct 29, 2025
03d94e8
Update Potential GPO 'Apply' misconfiguration.yml
martinsohn Jan 3, 2026
410a478
Update Collection health of DC Registry Data.yml
martinsohn Jan 3, 2026
e005489
Update Collection health of CA Registry Data.yml
martinsohn Jan 3, 2026
c00ac9d
Update Domains allowing unauthenticated rootDSE searches and binds.yml
martinsohn Jan 3, 2026
eb32e69
Rename & improve 'Direct Principal Rights Assignment'
martinsohn Jan 3, 2026
552b144
Merge branch 'main' into query-updates
martinsohn Jan 3, 2026
bd59811
Update Non-Tier Zero account with unconstrained delegation.yml
martinsohn Jan 3, 2026
f0f5a61
bugfix: owned clause for 'Shortest Paths from Owned Azure Users to Az…
martinsohn Jan 29, 2026
8f83a9a
bugfix: owned clause for 'Shortest Paths from Owned Azure Users to Az…
martinsohn Jan 29, 2026
32afdd7
Merge branch 'main' into query-updates
martinsohn Jan 29, 2026
3878d6a
Update Shortest Paths from Owned Azure Users to Azure VMs.yml
martinsohn Jan 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions queries/Shortest Paths from Owned Azure Users to Azure Keyvaults.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,9 @@ category: Shortest Paths
description: Return shortest paths from Owned Azure Users to Azure Keyvaults to check for attack vectors.
query: |-
MATCH p = shortestPath((n:AZUser)-[:AZ_ATTACK_PATHS*..]->(g:AZKeyVault))
WHERE m.system_tags CONTAINS 'owned'
WHERE ((n:Tag_Owned) OR COALESCE(n.system_tags, '') CONTAINS 'owned')
RETURN p
revision: 1
revision: 2
resources:
acknowledgements: Daniel Scheidt, @theluemmel

5 changes: 3 additions & 2 deletions queries/Shortest Paths from Owned Azure Users to Azure VMs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,9 @@ category: Shortest Paths
description: Return shortest paths from Owned Azure Users to Azure VMs to check for attack vectors.
query: |-
MATCH p = shortestPath((m:AZUser)-[:AZ_ATTACK_PATHS*..]->(n:AZVM))
WHERE m.system_tags CONTAINS 'owned'
WHERE ((m:Tag_Owned) OR COALESCE(m.system_tags, '') CONTAINS 'owned')
RETURN p
revision: 1
revision: 2
resources:
acknowledgements: Daniel Scheidt, @theluemmel