Tomas-AS

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

ScoutSuite

Multi-Cloud Security Auditing Tool

bbot

A recursive internet scanner for hackers.

MicroBurst

A collection of scripts for assessing Microsoft Azure security

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

MFASweep

A tool for checking if MFA is enabled on multiple Microsoft Services

AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365

AzureMasterClass

Repo for the Azure Master Class

TeamFiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Azure-Network-Security

Resources for improving Customer Experience with Azure Network Security

AzureGoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

SimuLand

Understand adversary tradecraft and improve detection strategies

BlueHound

BlueHound - pinpoint the security issues that actually matter

Azure_Workshop

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

365Inspect

A PowerShell script that automates the security assessment of Microsoft 365 environments.

EntraExporter

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.

azure-orphan-resources

Centralize orphan resources in Azure environments

GoodHound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

Azure-AD-Incident-Response-PowerShell-Module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

DefendTheFlag

Get started fast with a built out lab, built from scratch via Azure Resource Manager (ARM) and Desired State Configuration (DSC), to test out Microsoft's security products.

Intune-ACSC-Windows-Hardening-Guidelines

Collection of Intune policies that could assist with implementing ACSC's Windows hardening guidance.

purviewlab

Sentinel_KQL

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

Penetration-Testing-Azure-for-Ethical-Hackers

Penetration Testing Azure for Ethical Hackers, published by Packt

ADInspect

A PowerShell script that automates the security assessment of Microsoft Active Directory environments.

security-awareness-training

AD_Enum

AD enum emulation

Stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

M365Security

Public repo with all things Microsoft Security