PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

😎 Awesome list of all things related to Microsoft Entra

Maester is a PowerShell based test automation framework to help you stay in control of your Microsoft security configuration.

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

Backend for frontend security using Angular Standalone (nx) and ASP.NET Core backend

Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

my personal collection of scripts & guides to configuring a standard enterprise Intune enviroment.

Collection of Microsoft Identity Threat Detection and Response resources.

Backend for frontend security using Vue.js Typescript, Vite, ASP.NET Core backend and Microsoft Entra ID

Repository for public site hosting graph permissions

Various Scripts and Tools for Microsoft Technologies Professionals

This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to provide analysis of account password hygene based on metadata.

PowerShell repository for Microsoft 365 assessment module