This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

AADInternals PowerShell module for administering Azure AD and Office 365

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

Some scripts to abuse kerberos using Powershell

Ghosting-AMSI

Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By following this approach, a security researcher will hopeful…

PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.