Maester is a test automation framework to help you stay in control of your Microsoft security configuration.

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

😎 Awesome list of all things related to Microsoft Entra

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

A compact and flexible HTTP server application framework for Object Pascal based on Internet Direct (Indy)

Backend for frontend security using Angular CLI and ASP.NET Core backend

A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

my personal collection of scripts & guides to configuring a standard enterprise Intune enviroment.

PowerShell repository for Microsoft 365 assessment module

Collection of Microsoft Identity Threat Detection and Response resources.

Backend for frontend security using Vue.js Typescript, Vite, ASP.NET Core backend and Microsoft Entra ID

This repository provides a Terraform Provider for Microsoft 365, leveraging the Microsoft Graph API to enable Configuration as Code for Microsoft 365 environments. With this provider, you can automate the provisioning, management, and configuration of Entra, Intune and other aspects of M365.

Repository for public site hosting graph permissions

Rethink Secure Score: risk-based scoring across Defender XDR, Entra, AD, Azure, ExposureGraph, and Shodan — weighted by consequence, Tier 0–3 criticality, and risk factors. Fix what attackers reach for first. Asset profiling, ready-to-use reports, executive summary. Zero footprint, MVP-built, free.