Skip to content
KitploitKITPLOIT
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ

ํ•ดํ‚น, ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋„๊ตฌ๋ฅผ ๋‹น์‹ ์˜ ๋ณด์•ˆ ๋ฌด๊ธฐ๊ณ ์—!

Kitploit์€ ํ•ดํ‚น, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ฐ ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ตœ์‹  ํ”„๋กœ์ ํŠธ ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐœ๊ฒฌํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์ฐพ๊ณ , ์‹œ์Šคํ…œ์„ ๋ถ„์„ํ•˜๊ณ , ํ…Œ์ŠคํŠธ๋ฅผ ์ž๋™ํ™”ํ•˜๊ณ , ๋ณด์•ˆ์„ ๊ฐ•ํ™”ํ•˜์„ธ์š”.

ยทยทํ”ผ๋“œยท๋ฌธ์˜ยท๊ฐœ์ธ์ •๋ณดยทยฉ 2026 Kitploit

๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ

์นดํ…Œ๊ณ ๋ฆฌ

๋ชจ๋“  ์นดํ…Œ๊ณ ๋ฆฌ ๋ณด๊ธฐ
Loading categories
๋„๊ตฌ/GitHubGitHub/merill/awesome-entra
Authentication & AuthorizationConfiguration AuditingPenetration TestingCloud SecurityIdentity & Access Management (IAM)Incident ResponseCurated ResourcesLearning Paths & Courses
GitHubmerill/awesome-entra

awesome-entra

๐Ÿ˜Ž Microsoft Entra์™€ ๊ด€๋ จ๋œ ๋ชจ๋“  ๊ฒƒ์— ๋Œ€ํ•œ Awesome ๋ชฉ๋ก

์ €์žฅ์†Œ ๋ณด๊ธฐ
77113533๊ฐœ์›” ์ „Kitploit ๊ฒ€ํ†  ์™„๋ฃŒ

์ธ๊ธฐ

๋ชจ๋‘ ๋ณด๊ธฐ โ†’

์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ๊ฐ€์žฅ ๋งŽ์ด ์‚ฌ์šฉ๋˜๋Š” ๋„๊ตฌ๋ฅผ ์ฐพ์•„๋ณด์„ธ์š”.

๋ชจ๋“  ๋„๊ตฌ ํƒ์ƒ‰

๋„๊ตฌ ์ปฌ๋ ‰์…˜์„ ๋‘˜๋Ÿฌ๋ณด์„ธ์š”

๋ชจ๋“  ๋„๊ตฌ ๋ณด๊ธฐ โ†’
๊ณต์œ 
์›น์‚ฌ์ดํŠธ

Awesome Entra Awesome

Microsoft Entra ๋„๊ตฌ, ๊ฐ€์ด๋“œ ๋ฐ ๊ธฐํƒ€ ๋ฆฌ์†Œ์Šค์— ๋Œ€ํ•œ ์—„์„ ๋œ ๋ชฉ๋ก์ž…๋‹ˆ๋‹ค.

๋ชฉ์ฐจ

  • Merill์˜ ๋‰ด์Šค๋ ˆํ„ฐ ๋ฐ ํŒŸ์บ์ŠคํŠธ
  • ๋งˆ์ธ๋“œ ๋งต
  • ๋Ÿฌ๋‹ ํ—ˆ๋ธŒ
  • ํ”„๋ ˆ์  ํ…Œ์ด์…˜
  • aka.ms
  • ๋„๊ตฌ
  • ์ปค๋ฎค๋‹ˆํ‹ฐ
  • YouTube
  • ํŒŸ์บ์ŠคํŠธ
  • Bluesky
  • Twitter
  • LinkedIn
  • ๋ธ”๋กœ๊ทธ

Merill์˜ ๋‰ด์Šค๋ ˆํ„ฐ ๋ฐ ํŒŸ์บ์ŠคํŠธ

  • Entra.News - Microsoft์™€ ์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ์ œ๊ณตํ•˜๋Š” ์ตœ์‹  Microsoft Entra ๋‰ด์Šค๋ฅผ ๋งค์ฃผ ์ •๋ฆฌํ•ด ์ „ํ•ฉ๋‹ˆ๋‹ค.
  • Entra.Chat - ๋ฒ ํ…Œ๋ž‘ Entra ์‹ค๋ฌด์ž์™€ Microsoft Entra ์ œํ’ˆ ๊ทธ๋ฃน ํŒ€์›์ด ํ•จ๊ป˜ํ•˜๋Š” ์ฃผ๊ฐ„ Entra ํŒŸ์บ์ŠคํŠธ.

๋งˆ์ธ๋“œ ๋งต

  • Microsoft Entra Mind Maps - Microsoft Entra์™€ ๊ทธ ๊ตฌ์„ฑ ์š”์†Œ๋ฅผ ๋ฌธ์„œ ๋งํฌ์™€ ํ•จ๊ป˜ ์‹œ๊ฐ์ ์œผ๋กœ ํ‘œํ˜„ํ•œ ์ง€๋„. Entra Roles ๋งˆ์ธ๋“œ๋งต์„ ํฌํ•จํ•ฉ๋‹ˆ๋‹ค.

๋Ÿฌ๋‹ ํ—ˆ๋ธŒ

์ด ๋Ÿฌ๋‹ ํ—ˆ๋ธŒ๋Š” Microsoft Entra์˜ CxE(Customer Experience Engineering) ํŒ€์ด ๊ด€๋ฆฌํ•ฉ๋‹ˆ๋‹ค.

  • Global Secure Access - Resource Hub - GSA์— ๊ด€ํ•œ ๋ชจ๋“  ๊ฒƒ์„ ๋‹ค๋ฃจ๋Š” ์ง€์‹ ํ—ˆ๋ธŒ.
  • Microsoft Entra ID Governance Training Hub - ID ๊ฑฐ๋ฒ„๋„Œ์Šค๋ฅผ ๋งˆ์Šคํ„ฐํ•˜๊ธฐ ์œ„ํ•œ ๋„๊ตฌ, ๋ฌธ์„œ ๋ฐ ๊ต์œก ์ž๋ฃŒ.
  • Entra ID as Code Workshop - Terraform์„ ํ†ตํ•œ IaC(Infrastructure as Code)๋กœ Entra ID ํ…Œ๋„ŒํŠธ๋ฅผ ๊ด€๋ฆฌํ•ฉ๋‹ˆ๋‹ค. ์ด ์›Œํฌ์ˆ์€ Workforce ๋ฐ Customer(External ID) ์ธ์Šคํ„ด์Šค๋ฅผ ๋ชจ๋‘ ์ง€์›ํ•ฉ๋‹ˆ๋‹ค.
  • Identity Master Class - Identity Master Class๋ฅผ ์œ„ํ•œ ๋žฉ ๋ฐ ๋ฆฌ์†Œ์Šค ์†Œ์Šค - Experts Live Denmark 2026

ํ”„๋ ˆ์  ํ…Œ์ด์…˜

  • Entra Slide Decks - Merill์˜ Entra ๊ด€๋ จ ํ”„๋ ˆ์  ํ…Œ์ด์…˜ ๋ชจ์Œ (๋งˆ์šฐ์Šค ์˜ค๋ฅธ์ชฝ ๋ฒ„ํŠผ์„ ํด๋ฆญํ•˜๊ณ  ์‹œํฌ๋ฆฟ/InPrivate ์ฐฝ์œผ๋กœ ์—ด๊ธฐ)

aka.ms ๋ฐ cmd.ms

  • cmd.ms/portals/azuread - Entra ํฌํ„ธ์˜ ๋ธ”๋ ˆ์ด๋“œ์— ๋Œ€ํ•œ ๋ฐ”๋กœ ๊ฐ€๊ธฐ ์ „์ฒด ๋ชฉ๋ก.
  • aka.ms/commands - ์ผ๋ฐ˜์ ์ธ Microsoft ๋‹จ์ถ• ๋งํฌ ๋ชฉ๋ก.
  • msportals.io - ๋ชจ๋“  Microsoft ๊ด€๋ฆฌ ํฌํ„ธ์— ๋Œ€ํ•œ ๋งํฌ.
  • aka.ms/entratemplates - MFA, SSPR ๋“ฑ Microsoft Entra ๊ธฐ๋Šฅ์„ ๋ฐฐํฌํ•˜๊ธฐ ์œ„ํ•œ ์ด๋ฉ”์ผ ํ…œํ”Œ๋ฆฟ ๋ฐ ํฌ์Šคํ„ฐ.
  • aka.ms/entraidac - Microsoft Entra ID ๊ด€๋ฆฌ ์„ผํ„ฐ
  • aka.ms/myapps - My Apps
  • aka.ms/myaccount - My Account
  • aka.ms/my-groups - My Groups
  • aka.ms/my-access - My Access Packages
  • aka.ms/mystaff - My Staff
  • aka.ms/mysecurity, aka.ms/mysecurityinfo - My Security Info
  • aka.ms/mysignins - My Sign-ins
  • aka.ms/pim - Privileged Identity Management - ์—ญํ• 
  • aka.ms/pimg - Privileged Identity Management - ๊ทธ๋ฃน
  • aka.ms/pimr - Privileged Identity Management - ์—ญํ• 
  • aka.ms/pimz - Privileged Identity Management - Azure ๋ฆฌ์†Œ์Šค
  • aka.ms/sspr - ์…€ํ”„ ์„œ๋น„์Šค ์•”ํ˜ธ ์žฌ์„ค์ •
  • aka.ms/mfasetup - My Security Info์˜ ๋Œ€์•ˆ
  • aka.ms/entradocs - Microsoft Entra ๊ธฐ์ˆ  ๋ฌธ์„œ
  • aka.ms/graphref - Microsoft Graph REST API ์ฐธ์กฐ - v1.0
  • aka.ms/graphrefbeta - Microsoft Graph REST API ์ฐธ์กฐ - Beta

๋„๊ตฌ

Microsoft ์ œํ’ˆ ๋‹ค์šด๋กœ๋“œ

  • Microsoft Entra Application Proxy
  • Microsoft Entra Connect
  • Microsoft Entra Provisioning Agent
  • Microsoft Entra Connect Health agents

CLI

  • 365AutomatedLab - Excel ํ†ตํ•ฉ ๋ฌธ์„œ์˜ ํ…Œ์ŠคํŠธ ๋ฐ์ดํ„ฐ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ Microsoft 365 ํ…Œ์ŠคํŠธ ํ™˜๊ฒฝ์„ ๊ตฌ์ถ•ํ•ฉ๋‹ˆ๋‹ค. stars
  • AADInternals - Azure AD ๋ฐ Microsoft 365๋ฅผ ๊ด€๋ฆฌํ•˜๊ณ  ํ•ดํ‚นํ•˜๊ธฐ ์œ„ํ•œ PowerShell ํˆดํ‚ท. stars
  • AzADServicePrincipalInsights - ์„œ๋น„์Šค ์ฃผ์ฒด/์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ๋ฐ ๊ด€๋ฆฌ ID์— ๋Œ€ํ•œ ์ธ์‚ฌ์ดํŠธ์™€ ๋ณ€๊ฒฝ ์ถ”์  (html, csv, json ์ถœ๋ ฅ). stars
  • Azure AD Assessment aka.ms/AzureADAssessmentTools - Azure AD ํ…Œ๋„ŒํŠธ์˜ ์ƒํƒœ๋ฅผ ํ‰๊ฐ€ํ•˜๊ณ  ๋ชจ๋ฒ” ์‚ฌ๋ก€ ์ง€์นจ/๊ถŒ์žฅ ์‚ฌํ•ญ์„ ์ œ๊ณตํ•˜๋Š” ๊ฐ€์ด๋“œ. stars
  • Azure-AccessPermissions - Azure Active Directory ํ™˜๊ฒฝ์—์„œ ์•ก์„ธ์Šค ๊ถŒํ•œ์„ ์—ด๊ฑฐํ•˜๋Š” ์Šคํฌ๋ฆฝํŠธ stars
  • AzureADTenantID - Azure AD ํ…Œ๋„ŒํŠธ์˜ TenantID๋ฅผ ๊ฒ€์ƒ‰ํ•˜๋Š” PowerShell ๋ชจ๋“ˆ. stars

Web apps- AADInternals - OSINT - ํ…Œ๋„ŒํŠธ ์ •๋ณด๋ฅผ ํ‘œ์‹œํ•˜๋Š” OSINT ์›น ์•ฑ์ž…๋‹ˆ๋‹ค.

  • API Token Tools - OAuth 2.0 ํ† ํฐ์„ ์š”์ฒญํ•˜๊ณ  ์•ฑ ๋“ฑ๋ก์„ ์œ„ํ•œ ์ธ์ฆ์„œ ๊ธฐ๋ฐ˜ ์ธ์ฆ(Certificate Based Authentication) ๊ตฌํ˜„์„ ์ง€์›ํ•˜๋Š” ๋„๊ตฌ๋ฅผ ์ œ๊ณตํ•˜๋Š” ์›น ์•ฑ์ž…๋‹ˆ๋‹ค.
  • Conditional Access Blueprint - CA ์ •์ฑ…์„ ๋ชจ๋ธ๋งํ•˜๊ณ  ์ƒ์„ฑํ•˜๋Š” ๋„ค ๊ฐ€์ง€ ๋„๊ตฌ์ž…๋‹ˆ๋‹ค.
  • EntraPulse - Microsoft Graph ๋ฐ ๋ฌธ์„œ๋กœ ๊ฐ€๋Š” AI ๊ธฐ๋ฐ˜ ๊ฒŒ์ดํŠธ์›จ์ด์ž…๋‹ˆ๋‹ค. Lokka ๋ฐ Docs/Learn MCP์šฉ ๋กœ์ปฌ ๋ฐ ํด๋ผ์šฐ๋“œ LLM์„ ์ง€์›ํ•ฉ๋‹ˆ๋‹ค.
  • Entra Scopes - Microsoft ํผ์ŠคํŠธํŒŒํ‹ฐ ์•ฑ์˜ ์˜๋กœ์šฐ ํŽ˜์ด์ง€์ž…๋‹ˆ๋‹ค. ๋ฒ”์œ„, FOCI ๋“ฑ์œผ๋กœ ํ•„ํ„ฐ๋งํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
  • Entra Sign-In Url Builder - OAuth 2.0 ๊ถŒํ•œ ๋ถ€์—ฌ URL๊ณผ ๊ด€๋ฆฌ์ž ๋™์˜ URL์„ ์ƒ์„ฑํ•˜๋Š” ๋„๊ตฌ์ž…๋‹ˆ๋‹ค. SSO ํ…Œ์ŠคํŠธ์— ์œ ์šฉํ•ฉ๋‹ˆ๋‹ค.
  • Graph Explorer aka.ms/ge - Graph Explorer๋Š” Microsoft Graph API๋ฅผ ์ดํ•ดํ•˜๊ณ  ํ…Œ์ŠคํŠธํ•˜๋Š” ๋ฐ ๋„์›€์ด ๋˜๋Š” ์›น ๊ธฐ๋ฐ˜ ๋„๊ตฌ์ž…๋‹ˆ๋‹ค.
  • Graph Permissions Explorer - ๊ฐ Graph ๊ถŒํ•œ ๋ฒ”์œ„์—์„œ ์•ก์„ธ์Šคํ•  ์ˆ˜ ์žˆ๋Š” Graph API๋ฅผ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
  • Graph Permissions Explorer for Terraform - Terraform Entra ID ์„œ๋น„์Šค ์ฃผ์ฒด์˜ Graph API ๊ถŒํ•œ์„ ์ฐพ๊ณ , ์„ ํƒํ•˜์—ฌ ๋ฐ”๋กœ ์‚ฌ์šฉ ๊ฐ€๋Šฅํ•œ ๊ตฌ์„ฑ์œผ๋กœ ๋งŒ๋“ค ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
  • idPowerToys - ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค ์‹œ๊ฐํ™” ๋„๊ตฌ์™€ Entra ๋งˆ์ธ๋“œ ๋งต์„ ํฌํ•จํ•œ Microsoft Entra ๊ด€๋ จ ํŒŒ์›Œ ํ† ์ด์ž…๋‹ˆ๋‹ค.
  • SCIM Playground - SCIM Playground๋Š” SCIM API๋ฅผ ์ดํ•ดํ•˜๊ณ  ํ…Œ์ŠคํŠธํ•˜๋Š” ๋ฐ ๋„์›€์ด ๋˜๋Š” ์›น ๊ธฐ๋ฐ˜ ๋„๊ตฌ์ž…๋‹ˆ๋‹ค.
  • SCIMTool - Microsoft Entra์šฉ ํ”„๋กœ๋น„์ €๋‹ ๊ฐ€์‹œ์„ฑ ๋ฐ SCIM 2.0 ๋ชจ๋‹ˆํ„ฐ โ€” ๋ช‡ ๋ถ„ ์•ˆ์— ๋ฐฐํฌํ•˜๊ณ  ์ด๋ฒคํŠธ๋ฅผ ์ฆ‰์‹œ ์ดํ•ดํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.
  • Tenant Lookup - ํ…Œ๋„ŒํŠธ๊ฐ€ ์œ„์น˜ํ•œ ๊ณณ์„ ๋ณด์—ฌ์ค๋‹ˆ๋‹ค. Microsoft 365 ๋ฏธ๊ตญ ์ •๋ถ€ ํ”„๋กœ๊ทธ๋žจ ํŒ€์ด ์šด์˜ํ•ฉ๋‹ˆ๋‹ค.

Log Analytics, KQL, Logic Apps...

  • Entra ID Security Config Analyzer (EIDSCA) - Log Analytics, Azure Workbook ๋ฐ Sentinel์„ ์‚ฌ์šฉํ•˜์—ฌ Entra ID ๋ณด์•ˆ ๊ตฌ์„ฑ์„ ๋ชจ๋‹ˆํ„ฐ๋งํ•ฉ๋‹ˆ๋‹ค. stars
  • ํ—ŒํŒ… ์ฟผ๋ฆฌ ๋ฐ ํƒ์ง€ ๊ทœ์น™ - Azure Active Directory
  • ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค์—์„œ BreakGlass ๊ทธ๋ฃน ์ž๋™ ์ œ์™ธ - ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค ์ •์ฑ…์—์„œ BreakGlass ๊ทธ๋ฃน์„ ์ž๋™์œผ๋กœ ์ œ์™ธํ•˜๋Š” Logic App์ž…๋‹ˆ๋‹ค.
  • EntraID-Group-Cleanup - ๊ทธ๋ฃน ๋ฉค๋ฒ„์‹ญ ๊ธฐ๊ฐ„(์˜ˆ: 30์ผ)์— ๋”ฐ๋ผ ๊ทธ๋ฃน์—์„œ ์‚ฌ์šฉ์ž๋ฅผ ์ž๋™์œผ๋กœ ์ œ๊ฑฐํ•˜๋Š” Azure Runbook์ž…๋‹ˆ๋‹ค. stars
  • EntraID-MFA-DynamicGroup - MFA ์ƒํƒœ์— ๋”ฐ๋ผ ์‚ฌ์šฉ์ž๋ฅผ ๊ทธ๋ฃน์— ์ž๋™์œผ๋กœ ์ถ”๊ฐ€ํ•˜๋Š” Azure Runbook์ž…๋‹ˆ๋‹ค. stars
  • Dalonso-Security-Repo - ์ด ๊ณต๊ฐ„์€ Microsoft ๋ณด์•ˆ ๊ธฐ์ˆ ๊ณผ ๊ด€๋ จ๋œ ์ง€์‹, ๋„๊ตฌ, ์‹ค๋ฌด ์‚ฌ๋ก€๋ฅผ ๊ณต์œ ํ•˜๊ธฐ ์œ„ํ•ด ๋งˆ๋ จ๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

์ž๊ฒฉ์ฆ

  • Microsoft Certified: Identity and Access Administrator Associate
  • SC-300: Microsoft Identity and Access Administrator
  • SC-300: ํ•™์Šต ๊ฒฝ๋กœ
  • SC-300 ์‹œํ—˜ ํ•™์Šต ๊ฐ€์ด๋“œ: Microsoft Identity and Access Administrator
  • SC-300 ์‹œํ—˜ ์ค€๋น„ ๋™์˜์ƒ - Microsoft Learn
  • SC-300T00-A ๊ณผ์ •: Identity and Access Administrator
  • John Savill์˜ SC-300 Cram - ์žฌ์ƒ ๋ชฉ๋ก

์ปค๋ฎค๋‹ˆํ‹ฐ

  • Reddit /r/Entra - Microsoft Entra๋ฅผ ๋…ผ์˜ํ•˜๋Š” ์„œ๋ธŒ๋ ˆ๋”ง์ž…๋‹ˆ๋‹ค.
  • Discord discord.entra.news - Microsoft Entra๋ฅผ ๋…ผ์˜ํ•˜๋Š” Discord ์„œ๋ฒ„์ž…๋‹ˆ๋‹ค.
  • Slack - MacAdmins #microsoft-entra ์ฑ„๋„ - Apple ๊ธฐ๊ธฐ์™€ ๊ด€๋ จ๋œ Microsoft Entra๋ฅผ ๋…ผ์˜ํ•˜๋Š” Slack ์ฑ„๋„์ž…๋‹ˆ๋‹ค.
  • LinkedIn ๊ทธ๋ฃน - Microsoft Entra - Microsoft Entra๋ฅผ ๋…ผ์˜ํ•˜๋Š” LinkedIn ๊ทธ๋ฃน์ž…๋‹ˆ๋‹ค.

YouTube

์ฑ„๋„

  • Andy Malone (@AndyMaloneMVP), MVP
  • John Craddock Identity and Access Training (@john_craddock), MVP
  • John Savill (@NTFAQGuy), Microsoft
  • Merill Fernando (@merillx)), Microsoft
  • Peter Rising (@peterrisingM365), MVP
  • RioCloudSync (@RioCloudSync), MVP
  • Tech Mind Factory (@TechMindFactory), MVP
  • Threatscape (@threatscape), MVP

์žฌ์ƒ ๋ชฉ๋ก

  • Microsoft Entra์˜ ํ”ผ์‹ฑ ์ €ํ•ญ ์ธ์ฆ

ํŒŸ์บ์ŠคํŠธ

  • Azure Security Podcast
  • Entra Chat
  • Ctrl+Alt+Azure

์‡ผ

Entra ID ์•„ํ‚คํ…์ฒ˜ ์‹ฌ์ธต ๋ถ„์„

  • Microsoft Entra ID Core Store: ๋ฐ์ดํ„ฐ ์„ผํ„ฐ
  • Microsoft Entra ID Core Store: ์ฝ๊ธฐ ๋ฐ ์“ฐ๊ธฐ ๋ณต์ œ๋ณธ
  • Microsoft Entra ID Core Store: ํ™•์žฅ ๋‹จ์œ„

๋ฉ‹์ง„ ๋ธ”๋กœ๊ทธ ๊ฒŒ์‹œ๋ฌผ

์ด ๊ฒŒ์‹œ๋ฌผ๋“ค์€ ๋จธ๋ฆฌ๊ฐ€ ์•„ํ”„๊ฒŒ ๋งŒ๋“ค์ง€๋งŒ, ์ข‹์€ ์˜๋ฏธ๋กœ ๊ทธ๋ ‡์Šต๋‹ˆ๋‹ค.

  • ํด๋ผ์šฐ๋“œ ID ์†์ƒ ๋ฐฉ์ง€๋ฅผ ์œ„ํ•œ Microsoft ์ธ์‹œ๋˜ํŠธ ๋Œ€์‘ ๊ตํ›ˆ

Bluesky

  • Damien Bowden, MVP
  • Merill Fernando, Microsoft
  • Daniel Krzyczkowski, MVP
  • Darren Robinson, MVP

Twitter

  • Ali Tajran (@alitajran)
  • Andy Robbins (@_wald0), BloodHound
  • Claus Jespersen, Microsoft
  • Darren Robinson (@darrenjrobinson), MVP
  • Daniel Krzyczkowski (@DKrzyczkowski), MVP
  • Daniel Bradley (@DanielatOCN), MVP
  • DebugPrivilege (@DebugPrivilege), ์ „ MVP
  • Dirk-jan (@_dirkjan), ROADrecon
  • Dr. Nestori Syynimaa (@DrAzureAD), AADInternals, Microsoft
  • Erica Zelic (@EricaZelic)
  • Fabian Bader (@fabian_bader), MVP
  • Jan Bakker (@janbakker_), MVP
  • Jef Kazimer (@jefkazimer), Microsoft
  • Jeffrey Appel (@JeffreyAppel7), MVP
  • Joe Stocker (@ITguySoCal), MVP
  • John Savill (@NTFAQGuy), Microsoft
  • Jon Jarvis (@jonjarvis), MVP
  • Jon Towles (@m0bilej0n), MVP
  • Joosua Santasalo (@SantasaloJoosua), MVP
  • @inversecos
  • Karl Fosaaen (@kfosaaen), MicroBurst
  • Lukas Beran (@lukasberancz), Microsoft
  • Marius Solbakken (@mariussolbakken)

LinkedIn

  • Damien Bowden, MVP
  • Jan Bakker, MVP
  • Chetan Desai, Microsoft
  • Christina Morillo, ์ „ Microsoft
  • Eric Mannon, MVP
  • Eric Woodruff, Semperis
  • Katie Knowles, DataDog
  • Mark Wahl, Microsoft
  • Tee Earls, Microsoft
  • Daniel Krzyczkowski, MVP

๋ธ”๋กœ๊ทธ

Microsoft ๋ธ”๋กœ๊ทธ

  • Microsoft Entra Blog - aka.ms/entrablog
  • Microsoft Entra Developer Blog
  • Microosft Security Blog

์ปค๋ฎค๋‹ˆํ‹ฐ ๋ธ”๋กœ๊ทธ

  • 360 Thrive 365 - threesixtythrive365.com
  • Admindroid Blog - blog.admindroid.com
  • Alex Holmeset's Blog - alexholmeset.blog
  • Alitajran - alitajran.com
  • Andy Robbins - medium.com/@_wald0
  • Blueboxes - blueboxes.co.uk
  • Brian Reid - c7solutions.com
  • Darren Robinson - blog.darrenjrobinson.com
  • Lukas Beran - cswrld.com
  • Call 4 Cloud - call4cloud.nl
  • Charbel Nemnom - charbelnemnom.com
  • Ciraltos - ciraltos.com
  • Cloud Architekt - cloud-architekt.net
  • Cloud Brothers - cloudbrothers.info
  • Cloud Coffee - cloudcoffee.ch
  • CloudTips - cloudtips.nl
  • Damien Bowden - damienbod.com
  • David Okeyode's Blog - davidokeyode.medium.com
  • Derk van der Woude - derkvanderwoude.medium.com
  • DirTeam - dirteam.com
  • EMS Route - emsroute.com
  • F12 - f12.hu
  • Formula5 - formula5.com
  • Good Workaround - goodworkaround.com

์‚ฌ์šฉ์ž ๊ทธ๋ฃน

  • Dutch Microsoft Entra Community
๋„๊ตฌ ๋‹ค์šด๋กœ๋“œ
  • AzurePrivilegedIAM - Microsoft Azure ๋ฐ Microsoft Entra์—์„œ ๊ถŒํ•œ ์žˆ๋Š” ID ๋ฐ ์•ก์„ธ์Šค ๊ด€๋ฆฌ๋ฅผ ์œ„ํ•œ ๋ฌธ์„œ์™€ ์ƒ˜ํ”Œ stars
  • AzurePasswordProtectionCalculator - Azure Password Protection์šฉ ๊ณ„์‚ฐ๊ธฐ stars
  • BadZure - ์ผ๋ฐ˜์ ์ธ Entra ๋ณด์•ˆ ๊ตฌ์„ฑ ์˜ค๋ฅ˜๋ฅผ ์‹œ๋ฎฌ๋ ˆ์ด์…˜ํ•˜๋Š” ๋„๊ตฌ. stars
  • BloodHound - BloodHound๋Š” ๊ทธ๋ž˜ํ”„ ์ด๋ก ์„ ํ™œ์šฉํ•˜์—ฌ Active Directory ํ™˜๊ฒฝ์—์„œ ๋น ๋ฅด๊ฒŒ ์‹๋ณ„ํ•˜๊ธฐ ์–ด๋ ค์šด ์ˆจ๊ฒจ์ง„ ๊ด€๊ณ„์™€ ๊ณต๊ฒฉ ๊ฒฝ๋กœ๋ฅผ ๋“œ๋Ÿฌ๋ƒ…๋‹ˆ๋‹ค. stars
  • CA Optics - ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค(Conditional Access) ๊ฒฉ์ฐจ ๋ถ„์„๊ธฐ stars
  • ConditionalAccessDocumentation - ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค ์ •์ฑ…์„ Excel๋กœ ๋ฌธ์„œํ™”ํ•˜๋Š” PowerShell ๋ชจ๋“ˆ. stars
  • ConvertTime - Unix/Windows ํƒ€์ž„์Šคํƒฌํ”„๋ฅผ DateTime PowerShell ๊ฐœ์ฒด๋กœ ๋ณ€ํ™˜ํ•ฉ๋‹ˆ๋‹ค. PowerShell DateTime ๊ฐœ์ฒด์—์„œ Unix/Windows ์‹œ๊ฐ„์„ ๊ฐ€์ ธ์˜ต๋‹ˆ๋‹ค. stars
  • DCToolbox - ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค ์ž๋™ํ™”, What-If ์‹œ๋ฎฌ๋ ˆ์ด์…˜ ๋“ฑ์„ ์œ„ํ•œ ๋„๊ตฌ ๋ชจ์Œ. stars
  • DIDSearcher - ION ๋ฐ Web ๋„คํŠธ์›Œํฌ์—์„œ DID๋ฅผ ๊ฒ€์ƒ‰ํ•˜์—ฌ ํ‚ค์™€ ์—”๋“œํฌ์ธํŠธ๋ฅผ ์ฐพ์„ ์ˆ˜ ์žˆ๋Š” ๊ฐ„๋‹จํ•œ ๋ฐฉ๋ฒ•์„ ์ œ๊ณตํ•˜๋Š” PowerShell ๋ชจ๋“ˆ. stars
  • EasyPIM - PIM Azure ๋ฆฌ์†Œ์Šค ์—ญํ• ๊ณผ ํ• ๋‹น์„ ์‰ฝ๊ฒŒ ๊ด€๋ฆฌํ•ฉ๋‹ˆ๋‹ค. stars
  • Entra Exporter aka.ms/EntraExporter - Microsoft Entra ํ…Œ๋„ŒํŠธ์˜ ๋ชจ๋“  ๊ตฌ์„ฑ๊ณผ ๋ฐ์ดํ„ฐ๋ฅผ ๋‚ด๋ณด๋‚ด๋Š” PowerShell ๋ชจ๋“ˆ. stars
  • Entra Export Template - Entra ํ…Œ๋„ŒํŠธ ์„ค์ •์„ ์˜ˆ์•ฝํ•˜์—ฌ ๋‚ด๋ณด๋‚ด๊ธฐ ์œ„ํ•œ ์›Œํฌํ”Œ๋กœ. stars
  • EntraGoat - ๋ณด์•ˆ ๊ตฌ์„ฑ ์˜ค๋ฅ˜์™€ ๊ณต๊ฒฉ ๋ฒกํ„ฐ๋ฅผ ์‹œ๋ฎฌ๋ ˆ์ด์…˜ํ•˜๊ธฐ ์œ„ํ•ด ์˜๋„์ ์œผ๋กœ ์ทจ์•ฝํ•˜๊ฒŒ ๊ตฌ์„ฑ๋œ Microsoft Entra ID ์ธํ”„๋ผ stars
  • Evilginx - ์ค‘๊ฐ„์ž ๊ณต๊ฒฉ(MITM) ํ”„๋ ˆ์ž„์›Œํฌ stars
  • family-of-client-ids-research - Azure AD ์ƒˆ๋กœ ๊ณ ์นจ ํ† ํฐ์˜ ๋ฌธ์„œํ™”๋˜์ง€ ์•Š์€ ๋™์ž‘์— ๋Œ€ํ•œ ์—ฐ๊ตฌ stars
  • Graph PowerShell Sample Script Repository - aka.ms/graphsamples - ์ปค๋ฎค๋‹ˆํ‹ฐ๊ฐ€ ๊ธฐ์—ฌํ•œ ์ผ๋ฐ˜์ ์ธ Graph PowerShell ์Šคํฌ๋ฆฝํŠธ ์ €์žฅ์†Œ
  • GraphRunner - Microsoft Graph API์™€ ์ƒํ˜ธ ์ž‘์šฉํ•˜๊ธฐ ์œ„ํ•œ ์‚ฌํ›„ ์นจํˆฌ ๋„๊ตฌ ์„ธํŠธ stars
  • JWTDetails - JWT ์•ก์„ธ์Šค ํ† ํฐ์„ ๋””์ฝ”๋”ฉํ•˜์—ฌ PowerShell ๊ฐœ์ฒด๋กœ ๋ณ€ํ™˜ํ•ฉ๋‹ˆ๋‹ค. PowerShell ๊ฐœ์ฒด์—๋Š” JWT ์„œ๋ช…(sig), JWT ํ† ํฐ ๋งŒ๋ฃŒ(expiryDateTime), JWT ํ† ํฐ ๋งŒ๋ฃŒ๊นŒ์ง€ ๋‚จ์€ ์‹œ๊ฐ„(timeToExpiry)๋„ ํฌํ•จ๋ฉ๋‹ˆ๋‹ค. stars
  • MicroBurst - Azure ๊ณต๊ฒฉ์šฉ PowerShell ํˆดํ‚ท. stars
  • Microsoft365DSC - PowerShell DSC๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ Microsoft 365 ํ…Œ๋„ŒํŠธ ๊ตฌ์„ฑ์„ ๊ด€๋ฆฌ, ๊ตฌ์„ฑ, ์ถ”์ถœ ๋ฐ ๋ชจ๋‹ˆํ„ฐ๋งํ•ฉ๋‹ˆ๋‹ค. stars
  • Microsoft First Party AppNames aka.ms/AppNames - Microsoft ์ž์‚ฌ ์•ฑ ์ด๋ฆ„๊ณผ GUID๋ฅผ ๋งค์ผ ์—…๋ฐ์ดํŠธ๋˜๋Š” csv/json์œผ๋กœ ์ œ๊ณตํ•˜๋Š” ์ €์žฅ์†Œ (KQL ์ฟผ๋ฆฌ ๋ฐ ์Šคํฌ๋ฆฝํŠธ์— ์œ ์šฉ). stars
  • Microsoft-Cloud-Group-Analyzer - ํŠน์ • ๊ทธ๋ฃน ๋˜๋Š” ์‚ฌ์šฉ์ž๊ฐ€ ์–ด๋–ค ์„œ๋น„์Šค, ์ •์ฑ… ๋“ฑ์— ๋ฒ”์œ„๊ฐ€ ์ง€์ •๋˜์–ด ์žˆ๋Š”์ง€ ์ฆ‰๊ฐ์ ์ธ ์ธ์‚ฌ์ดํŠธ๋ฅผ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. stars
  • Microsoft-Extractor-Suite - Invictus IR - ์‚ฌ๊ณ  ๋Œ€์‘ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ชฉ์ ์œผ๋กœ Microsoft 365์™€ Azure์—์„œ ๋ฐ์ดํ„ฐ๋ฅผ ์ˆ˜์ง‘ํ•˜๊ธฐ ์œ„ํ•œ PowerShell ๋ชจ๋“ˆ. stars
  • MicrosoftGraphPS - Graph PowerShell SDK์šฉ ๋ฒ„์ „ ๊ด€๋ฆฌ์ž. stars
  • MiniGraph - Azure Functions์™€ ๊ฐ™์€ ๊ฒฝ๋Ÿ‰ ํ™˜๊ฒฝ์„ ์œ„ํ•œ ์ตœ์†Œ ์˜ค๋ฒ„ํ—ค๋“œ Microsoft Graph ํด๋ผ์ด์–ธํŠธ ๊ตฌํ˜„ stars
  • MSIdentityTools aka.ms/msid - ์ผ๋ฐ˜์ ์ธ Entra ๊ธฐ๋Šฅ์„ ์œ„ํ•œ ์œ ์šฉํ•œ cmdlet ๋ชจ์Œ. stars
  • Passkey Provider AAGUID's - ํŒจ์Šคํ‚ค ๊ณต๊ธ‰์ž AAGUID๋ฅผ ํ”„๋กœ๊ทธ๋ž˜๋ฐ ๋ฐฉ์‹์œผ๋กœ ๊ด€๋ฆฌํ•ฉ๋‹ˆ๋‹ค. stars
  • Ping Castle - ๋ณด์•ˆ ํ‰๊ฐ€ ๋„๊ตฌ stars
  • PKCE Code Verifier and Challenge Generator - OAuth2 Authorization Code Grant ํ๋ฆ„์— ์‚ฌ์šฉํ•  OAuth 2.0 PKCE(Proof Key for Code Exchange) 'code_challenge' ๋ฐ 'code_verifier'๋ฅผ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค. stars
  • PSMSGraphBatchRequest - ๋ฐ์ดํ„ฐ๋ฅผ Microsoft Graph ์ผ๊ด„ ์š”์ฒญ(Batch Request)์œผ๋กœ ๋ณ€ํ™˜ํ•˜๋Š” PowerShell ๋ชจ๋“ˆ. stars
  • PowerZure - Azure, AzureAD ๋ฐ ๊ด€๋ จ ๋ฆฌ์†Œ์Šค์— ๋Œ€ํ•œ ์ •์ฐฐ๊ณผ ๊ณต๊ฒฉ์„ ์ˆ˜ํ–‰ํ•˜๊ธฐ ์œ„ํ•ด ๋งŒ๋“ค์–ด์ง„ PowerShell ํ”„๋กœ์ ํŠธ. stars
  • ROADrecon - ๋ ˆ๋“œ ํŒ€๊ณผ ๋ธ”๋ฃจ ํŒ€ ๊ด€์ ์—์„œ Azure AD ์ •๋ณด๋ฅผ ํƒ์ƒ‰ํ•˜๋Š” ๋„๊ตฌ. stars
  • ROPCI - ROPC๋ฅผ ํ†ตํ•œ API ์•ก์„ธ์Šค๋ฅผ ํ—ˆ์šฉํ•˜๋Š” Entra ๊ตฌ์„ฑ์˜ MFA ๊ฒฉ์ฐจ๋ฅผ ์‹๋ณ„ํ•ฉ๋‹ˆ๋‹ค. stars
  • ScoutSuite - ๋ฉ€ํ‹ฐ ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ๊ฐ์‚ฌ ๋„๊ตฌ. stars
  • ScubaGear - cisa.gov - CISA๊ฐ€ ๊ฐœ๋ฐœํ•œ PowerShell ๋ชจ๋“ˆ๋กœ, M365 ํ…Œ๋„ŒํŠธ ๊ตฌ์„ฑ์ด SCuBA(Secure Cloud Business Applications) ๋ณด์•ˆ ๊ตฌ์„ฑ ๊ธฐ์ค€์„ ์ค€์ˆ˜ํ•˜๋Š”์ง€ ํ™•์ธํ•ฉ๋‹ˆ๋‹ค. stars
  • StormSpotter aka.ms/StormSpotter - Azure ๋ฐ Azure Active Directory ๊ฐœ์ฒด๋ฅผ ๊ทธ๋ž˜ํ”„๋กœ ์‹œ๊ฐํ™”ํ•˜๋Š” Azure ๋ ˆ๋“œ ํŒ€ ๋„๊ตฌ. stars
  • TokenTactics - Microsoft Entra์— ๋Œ€ํ•œ ํ† ํฐ ๊ธฐ๋ฐ˜ ๊ณต๊ฒฉ์˜ ์˜ํ–ฅ์„ ํ…Œ์ŠคํŠธํ•˜๊ณ  ์‹œ์—ฐํ•˜๋Š” ๋„๊ตฌ. stars
  • TokenTacticsV2 - CAE ๋ฐ ํ† ํฐ ์—”๋“œํฌ์ธํŠธ๋ฅผ ์ง€์›ํ•˜๋Š” ํ›Œ๋ฅญํ•œ TokenTactics์˜ ํฌํฌ. stars
  • Microsoft cloud group analyzer - ํŠน์ • ๊ทธ๋ฃน ๋˜๋Š” ์‚ฌ์šฉ์ž๊ฐ€ ์–ด๋–ค ์„œ๋น„์Šค/์ •์ฑ… ๋“ฑ์— ๋ฒ”์œ„๊ฐ€ ์ง€์ •๋˜์–ด ์žˆ๋Š”์ง€ ์ธ์‚ฌ์ดํŠธ๋ฅผ ์ œ๊ณตํ•˜๋Š” ์Šคํฌ๋ฆฝํŠธ. stars
  • X509Details - X509 ์ธ์ฆ์„œ๋ฅผ ๋””์ฝ”๋”ฉํ•˜์—ฌ PowerShell ๊ฐœ์ฒด๋กœ ํ‘œ์‹œํ•ฉ๋‹ˆ๋‹ค. ์ธ์ฆ์„œ์˜ PowerShell ๊ฐœ์ฒด ์„ธ๋ถ€ ์ •๋ณด์— X509 ์ธ์ฆ์„œ ๋งŒ๋ฃŒ๊นŒ์ง€ ๋‚จ์€ ์‹œ๊ฐ„(timeToExpiry)์ด ํฌํ•จ๋˜๋„๋ก ์—…๋ฐ์ดํŠธ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. stars
  • EntraOps - Enterprise Access Model์„ ๊ธฐ๋ฐ˜์œผ๋กœ ๊ถŒํ•œ์„ ๋ถ„๋ฅ˜, ์‹๋ณ„, ๋ณดํ˜ธํ•ฉ๋‹ˆ๋‹ค. stars
  • Maester - ์กฐ๊ฑด๋ถ€ ์•ก์„ธ์Šค ๋ฐ Entra ๊ตฌ์„ฑ์„ ์œ„ํ•œ ์ž๋™ํ™”๋œ ํ…Œ์ŠคํŠธ ํ”„๋ ˆ์ž„์›Œํฌ stars
  • M365IdentityPosture - M365IdentityPosture๋Š” Microsoft 365, Azure AD/Entra ID ๋ฐ ํ•˜์ด๋ธŒ๋ฆฌ๋“œ ํ™˜๊ฒฝ ์ „๋ฐ˜์˜ ๋ณด์•ˆ ํƒœ์„ธ ํ‰๊ฐ€์™€ ID ๊ฑฐ๋ฒ„๋„Œ์Šค ๋ณด๊ณ ๋ฅผ ์œ„ํ•œ ํ™•์žฅ ๊ฐ€๋Šฅํ•œ PowerShell ํ”„๋ ˆ์ž„์›Œํฌ์ž…๋‹ˆ๋‹ค.
  • M365Documentation - ๊ด€๋ฆฌ์ž์™€ ์ปจ์„คํ„ดํŠธ์˜ ์ž‘์—…์„ ๋‹จ์ˆœํ™”ํ•˜๋Š” ์ž๋™ Microsoft 365 ๋ฌธ์„œํ™” ๋„๊ตฌ.
  • Matt Zorich (@reprise_99), Microsoft
  • Matthew Levy (@mattchatt42), MVP
  • Merill Fernando (@merill), Microsoft
  • Nathan McNulty (@nathanmcnulty), MVP
  • Nick Ludwig (@welcome2theDL), Microsoft
  • Olaf Hartong (@olafhartong), MVP, MVP
  • Pim Jacobs (@pimjacobs89), MVP, MVP
  • mRr3b00t (@mRr3b00t)
  • Nathan McNulty (@nathanmcnulty)
  • Rod Trent (@rodtrent), Microsoft
  • rootsecdev (@rootsecdev)
  • Ryan Hausknecht (@Haus3c)
  • Ryan Yates (@ryanyates1990), ํด๋ผ์šฐ๋“œ ๋ฐ ๋ฐ์ดํ„ฐ์„ผํ„ฐ ๊ด€๋ฆฌ ๋ถ„์•ผ ์ „ MVP
  • Sean Metcalf (@PyroTek3)
  • Stian A. Strysse (@stianstrysse)
  • Suryendu Bhattacharyya (@crookedbong)
  • @SwiftOnSecurity
  • Thomas Naunheim (@thomas_live), MVP, MVP
  • Thijs Lecomte (@ThijsLecomte), MVP, MVP
  • Tony Redmond (@12Knocksinna), MVP
  • Hamet Benoit's Blog - blog.hametbenoit.info
  • Hans Brender - hansbrender.com
  • Hybrid Brothers - hybridbrothers.com
  • Identity Man - identity-man.eu
  • Idefix Wiki - idefixwiki.no
  • In The Cloud 24/7 - inthecloud247.com
  • Intune IRL - intuneirl.com
  • Icewolf's Blog - blog.icewolf.ch
  • Jan Bakker - janbakker.tech
  • Jeff Brown's Blog - jeffbrown.tech
  • Julian Jakob - julianjakob.com
  • Learning By Doing - learningbydoing.cloud
  • Merill Fernando's Blog - merill.net
  • MS Security - mssec.wordpress.com
  • Matt Chatt - mattchatt.co.za
  • Michev.info - michev.info
  • Mike MDM - mikemdm.de
  • MIM And Beyond - suryendub.github.io
  • Mateusz Jendza - mjendza.net
  • Mobile Jon - mobile-jon.com
  • Myron Helgering - myronhelgering.com
  • Nate Hutchinson - natehutchinson.co.uk
  • Niels Kok - nielskok.tech
  • Niklas Rast - niklasrast.com
  • Oceanleaf - oceanleaf.ch
  • O365 Reports - o365reports.com
  • Our Cloud Network - ourcloudnetwork.com
  • Prajwal Desai - prajwaldesai.com
  • Poem to MDM - poemtomdm.fr
  • Practical 365 - practical365.com
  • Rod Trent's Substack - rodtrent.substack.com
  • Rogier Dijkman - rogierdijkman.medium.com
  • Rothe's Blog - blog.rothe.uk
  • RootSecDev - rootsecdev.medium.com
  • SCCMentor - sccmentor.com
  • SCloud - scloud.work
  • SMB to the Cloud - smbtothecloud.com
  • Sander Van Rooij - svrooij.io
  • Secure Cloud Blog - securecloud.blog
  • SecureD IAM - securediam.com
  • Silvio Di Benedetto - silviodibenedetto.com
  • Sky Cliffs - skycliffs.wordpress.com
  • Sky made simple - blog.skymadesimple.io
  • Sonnes Cloud Blog - blog.sonnes.cloud
  • Sysanddeploy - systanddeploy.com
  • TBone - tbone.se
  • That Lazy Admin - thatlazyadmin.com
  • The New Control Plane - medium.com/the-new-control-plane
  • Undocumented Features - undocumented-features.com
  • Zero Trust - zerotrust.how
  • Tech Mind Factory