entra

Maester is a test automation framework to help you stay in control of your Microsoft security configuration.

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

😎 Awesome list of all things related to Microsoft Entra

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

Backend for frontend security using Angular CLI and ASP.NET Core backend

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

my personal collection of scripts & guides to configuring a standard enterprise Intune enviroment.

Agentless, read-only security assessment for PowerShell 7: on-premises Active Directory, the Entra ID / Azure / Intune / Microsoft 365 identity plane, and Google Workspace. 658 checks mapped to CISA SCuBA, EIDSCA, CIS and NIST 800-53, every verdict backed by a golden-fixture test. Free under CC BY 4.0.

PowerShell repository for Microsoft 365 assessment module

Generate professional, audit-ready documentation of your Microsoft Intune tenant in minutes. Sign in, pick what to document, export as PDF or Word. Runs entirely in your browser with read-only Graph permissions. Use the free hosted app or self-host with Docker.

Collection of Microsoft Identity Threat Detection and Response resources.

Backend for frontend security using Vue.js Typescript, Vite, ASP.NET Core backend and Microsoft Entra ID

Rethink Secure Score: risk-based scoring across Defender XDR, Entra, AD, Azure, ExposureGraph, and Shodan — weighted by consequence, Tier 0–3 criticality, and risk factors. Fix what attackers reach for first. Asset profiling, ready-to-use reports, executive summary. Zero footprint, MVP-built, free.