ksgassama-lab/vulnerability-remediation-cve-2013-3900End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated…
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
azuread/azure-ad-incident-response-powershell-moduleThe Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in…
gerenios/aadinternalsPowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…
csandker/azure-accesspermissions
compasssecurity/entrafalconA lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…
soteria-security/365inspectA PowerShell script that automates the security assessment of Microsoft 365 environments.
mandiant/mandiant-azure-ad-investigator
f-bader/tokentacticsv2A fork of the great TokenTactics with support for CAE and token endpoint v2
dafthack/mfasweepA tool for checking if MFA is enabled on multiple Microsoft Services
cyberark/skyarkSkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
darkquasar/azurehunterA Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
vectra-ai-research/maad-afMAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
mgeeky/azurertAzureRT - A Powershell module implementing various Azure Red Team tactics
hyd3sec/azur3alph4PowerShell module for post-breach Azure red teaming, automating token extraction, resource enumeration, and lateral movement within managed identity…
joelgmsec/azuregraphPowerShell tool for enumerating Azure AD users, devices, applications, and domains via Microsoft Graph API, with offline data export capability.
