Alternatives and similar repositories for M365SAT

Users that are interested in M365SAT are comparing it to the libraries listed below

• LearningKijo / MDEtester
  MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.
  ☆194Updated last year
• nathanmcnulty / nathanmcnulty
  ☆373Updated this week
• msdirtbag / MDEAutomator
  PowerShell-based Automation of Defender for Endpoint
  ☆184Updated 7 months ago
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆198Updated this week
• Cloud-Architekt / AzurePrivilegedIAM
  Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.
  ☆183Updated 3 weeks ago
• CompassSecurity / EntraFalcon
  A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged object…
  ☆310Updated this week
• HuskyHacks / cazadora
  Simple hunting script for suspicious M365 OAuth Apps
  ☆320Updated 4 months ago
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆111Updated 2 years ago
• aollivierre / ConditionalAccess
  This repository contains a comprehensive set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID (…
  ☆102Updated 11 months ago
• jsa2 / caOptics
  CA Optics - Azure AD Conditional Access Gap Analyzer
  ☆334Updated last year
• mon-csirt / active-directory-security
  The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…
  ☆136Updated last year
• jflieben / assortedFunctionsV2
  ☆83Updated this week
• canix1 / PIMSCAN
  Tool for creating reports on Entra ID Role Assignments
  ☆100Updated last year
• msandbu / azuread
  ☆200Updated last year
• Cloud-Architekt / AzureSentinel
  Sharing my KQL queries for Azure Sentinel
  ☆205Updated 2 weeks ago
• merill / microsoft-info
  Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily
  ☆203Updated last week
• alexverboon / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆194Updated last month
• mattnovitsch / M365
  ☆85Updated this week
• jsa2 / AADAppAudit
  Microsoft Entra ID App Audit Solution (AADAppAudit)
  ☆84Updated last year
• f-bader / AzSentinelQueries
  Repository with Sentinel Analytics Rules, Hunting Queries and helpful external data sources.
  ☆137Updated last week
• ugurkocde / IntuneRBAC
  ☆92Updated 6 months ago
• AzureAD / MSIdentityTools
  Repository for the Microsoft Identity Tools PowerShell module which provides various tools for performing enhanced Identity administratio…
  ☆292Updated 2 months ago
• dougsbaker / CA-Export
  ☆46Updated 9 months ago
• EvotecIT / PasswordSolution
  This module allows the creation of password expiry emails for users, managers, administrators, and security according to defined template…
  ☆157Updated 9 months ago
• vladjoh / Need4Admin
  A PowerShell script to audit privileged users in Microsoft Entra ID and Azure with detailed reporting
  ☆52Updated 4 months ago
• Cyberlorians / Articles
  ☆54Updated this week
• jkerai1 / SoftwareCertificates
  Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC
  ☆64Updated this week
• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆65Updated 3 years ago
• emiliensocchi / azure-tiering
  Azure administrative tiering based on known attack paths
  ☆132Updated last week
• workoho / Entra-Tiering-Security-Model
  Implement a powerful Tiering Security Model in Microsoft Entra for your Cloud Administrator identities using Azure Automation.
  ☆51Updated 11 months ago