Alternatives and similar repositories for noCAP

Users that are interested in noCAP are comparing it to the libraries listed below

• emiliensocchi / azure-tiering
  Azure administrative tiering based on known attack paths
  ☆121Updated last week
• Corissalea / KQL-and-Workbooks
  Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!
  ☆20Updated last year
• O3-Cyber / AzureADRoleMonitor
  ☆50Updated last week
• soteria-security / ADInspect
  A PowerShell script that automates the security assessment of Microsoft Active Directory environments.
  ☆67Updated 2 years ago
• zh54321 / GraphPreConsentExplorer
  A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…
  ☆128Updated 6 months ago
• JeffMichelmore / MDEKit
  ☆41Updated last year
• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆110Updated 2 months ago
• soteria-security / MFArcade
  PowerShell script to create reports of M365 User Multi-factor Authentication Registration Status and Highlight MFA Related Conditional Ac…
  ☆13Updated last year
• jsa2 / AADAppAudit
  Microsoft Entra ID App Audit Solution (AADAppAudit)
  ☆83Updated last year
• rootsecdev / Presentations
  Presentations from Conferences
  ☆29Updated last year
• f-bader / EntraIDAuditLogToMicrosoftGraph
  A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri
  ☆32Updated last year
• jakehildreth / BlueTuxedo
  A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS
  ☆127Updated 8 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆111Updated last month
• uniQuk / caReports
  Conditional Access Reporting
  ☆27Updated 6 months ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆95Updated 2 years ago
• msdirtbag / ADXFlowmaster
  ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.
  ☆40Updated 11 months ago
• HybridBrothers / Hunting-Queries-Detection-Rules
  The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect…
  ☆54Updated 2 weeks ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆37Updated 2 months ago
• mon-csirt / active-directory-security
  The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…
  ☆124Updated last year
• canix1 / PIMSCAN
  Tool for creating reports on Entra ID Role Assignments
  ☆96Updated last year
• invictus-ir / Invictus-training
  Repository with supporting materials for Invictus Academy/Training
  ☆43Updated 9 months ago
• Bert-JanP / Sentinel-Automation
  Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.
  ☆103Updated 2 weeks ago
• msdirtbag / MicrosoftPurpleTeamToolkit
  ☆44Updated last year
• mr-r3b00t / KQL
  This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet
  ☆12Updated 7 months ago
• CompassSecurity / EntraFalcon
  A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged object…
  ☆267Updated this week
• Kaidja / Microsoft-Sentinel
  Microsoft Sentinel related content
  ☆37Updated 8 months ago
• microsoft / MSEntraIDProtectionGuidance
  MS Entra ID Protection Guidance
  ☆21Updated last year
• TheCloudScout / m365defender-adx
  ☆22Updated 2 years ago
• reprise99 / 4688-sysmon
  ☆61Updated 2 years ago
• netwrix / PingCastleCloud
  Audit program for AzureAD
  ☆149Updated 2 years ago