Azure AD enumeration and privilege escalation - Managed identity token theft - Key Vault access and secret extraction - Azure Functions for serverless C2 - Conditional Access Policy bypass