Maester is a test automation framework to help you stay in control of your Microsoft security configuration.

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

😎 Awesome list of all things related to Microsoft Entra

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

Backend for frontend security using Angular CLI and ASP.NET Core backend

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

my personal collection of scripts & guides to configuring a standard enterprise Intune enviroment.

PowerShell repository for Microsoft 365 assessment module

Collection of Microsoft Identity Threat Detection and Response resources.

Backend for frontend security using Vue.js Typescript, Vite, ASP.NET Core backend and Microsoft Entra ID

Rethink Secure Score: risk-based scoring across Defender XDR, Entra, AD, Azure, ExposureGraph, and Shodan — weighted by consequence, Tier 0–3 criticality, and risk factors. Fix what attackers reach for first. Asset profiling, ready-to-use reports, executive summary. Zero footprint, MVP-built, free.

A Windows-native control plane for Microsoft Intune & Entra device management. Rust + WinUI 3 client over a .NET Graph sidecar, with a searchable audit/drift time-machine, a diagnostics suite, and human-gated automation. v1.0 is a ground-up rewrite of the .NET/React v0.x app.

Repository for public site hosting graph permissions