Robuta

https://attack.mitre.org/techniques/T1556/009/ Modify Authentication Process: Conditional Access Policies, Sub-technique T1556.009 - Enterprise |... conditional access policies authentication process modify