Azure Token Harvesting via PowerShell Script

Elgonad .@elgonad

•updated Apr 23, 2026•0•175

Detects the specific PowerShell command structures used by the TeamPCP Checkmarx payload (mcpAddon.js) to extract and process Azure access tokens using the Az.Accounts module.