ExeSpy is a cross-platform PE viewer for EXE and DLL files

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…

Docs and samples about privileged identity and access management in Azure

AzGovViz (Azure Governance Visualizer) is a PowerShell script that captures Azure Governance related information such as Azure Policy, RBAC (a lot more) by polling Azure ARM and Microsoft Graph API…

Code samples and extended documentation to support the guidance provided in the Microsoft Cloud Adoption Framework

Red Team Attack Lab for TTP testing & research

Cloud Security Posture Management (CSPM)

Microsoft Administrator Sites

Workbooks for Azure Sentinel

Supplemental information and resources for the Security Benchmark documentation available at https://docs.microsoft.com/azure/security/benchmarks/.

AADInternals PowerShell module for administering Azure AD and Office 365

Enable the automatic deployment of Azure Sentinel using code

100 Days of IaC in Azure

The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects requiring both technologies (Splunk and Azure/Sentinel) or …

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

A Microservices-based framework for the study of Network Security and Penetration Test techniques

Sample code which allows scanning azure blobs for Malware

The Azure AD exploration framework.

Unsupported PowerApps Tools & Apps

Microsoft Defender Advanced Threat Protection - Resource Hub

Open Source Security Events Metadata (OSSEM)

Azure Red Team tool for graphing Azure and Azure Active Directory objects

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

Deployment scripts & config for Sock Shop

Generic Signature Format for SIEM Systems