Hidden in Plain Sight: Abusing Entra ID Administrative Units for Sticky Persistence | Datadog Security Labs

https://securitylabs.datadoghq.com/articles/abusing-entra-id-administrative-units/