PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

😎 Awesome list of all things related to Microsoft Entra

Maester is a PowerShell based test automation framework to help you stay in control of your Microsoft security configuration.

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily

Backend for frontend security using Angular Standalone (nx) and ASP.NET Core backend

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

my personal collection of scripts & guides to configuring a standard enterprise Intune enviroment.

Collection of Microsoft Identity Threat Detection and Response resources.

Backend for frontend security using Vue.js Typescript, Vite, ASP.NET Core backend and Microsoft Entra ID

PowerShell repository for Microsoft 365 assessment module

Repository for public site hosting graph permissions

Various Scripts and Tools for Microsoft Technologies Professionals

This repository provides a Terraform Provider for Microsoft 365, leveraging the Microsoft Graph API to enable Configuration as Code for Microsoft 365 environments. With this provider, you can automate the provisioning, management, and configuration of Entra, Intune and other aspects of M365.

This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to provide analysis of account password hygene based on metadata.