Open-source PowerShell toolkit for Microsoft 365 security investigations - Read-only compromise assessment
☆86Mar 9, 2026Updated 7 months ago
Alternatives and similar repositories for M365-Investigation-Toolkit
Users that are interested in M365-Investigation-Toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- XORCISM is a cybersecurity project for an open unified platform for cyber exposure management, and tools☆83Aug 29, 2026Updated last month
- Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.☆413Updated this week
- Generate professional, audit-ready documentation of your Microsoft Intune tenant in minutes. Sign in, pick what to document, export as PD…☆61Updated this week
- CVE ingestion + enrichment pipeline with an MCP server for AI agents.☆38Sep 30, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A professional engineering framework for Azure Virtual Desktop. Optimized for high-performance VM families (E, D, F, N-series). This scr…☆38Mar 16, 2026Updated 7 months ago
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆41Updated this week
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 3 months ago
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆17Nov 16, 2023Updated 2 years ago
- A PowerShell module for the Defender XDR portal☆143Oct 1, 2026Updated 2 weeks ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- An Open Harness and Benchmark for AI in Cybersecurity Operations.☆66Updated this week
- Kali365 - EvilTokens Replica☆74Jul 7, 2026Updated 3 months ago
- Framework-agnostic log sanitizer for browsers and Node.js. Redacts secrets and infrastructure identifiers with stable HMAC tokens so even…☆22Sep 23, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Agentic DFIR☆92Updated this week
- Threat hunting queries, Sigma rules, and detection engineering research based on MITRE ATT&CK techniques.☆75Updated this week
- Wazuh MCP Server: AI-Driven SOC Automation☆92Updated this week
- Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MIT…☆184Updated this week
- A collection of practical SOC investigation playbooks for common security alerts including brute-force attacks, phishing incidents, suspi…☆20Mar 15, 2026Updated 7 months ago
- SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled…☆88Aug 29, 2026Updated last month
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆43Sep 9, 2026Updated last month
- ☆83Sep 21, 2026Updated 3 weeks ago
- Blacklight is a cross-platform toolkit for mapping, analyzing, and understanding the local AI agent attack surface across Windows, macOS,…☆88Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- REx@Skill - Agentic Reverse Engineering eXecution Skill for binary vulnerability discovery☆111Sep 23, 2026Updated 3 weeks ago
- PhishCollector is a research framework for collecting, analysing, and tracking phishing sites.☆23Mar 1, 2026Updated 7 months ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆162Sep 11, 2026Updated last month
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆453Updated this week
- Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android ba…☆101Updated this week
- Block abused TLDs in Tenant Allow BlockList☆18Sep 10, 2026Updated last month
- ☆32Oct 13, 2025Updated last year
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆336Sep 14, 2026Updated last month
- A locally-hosted GUI for the aircrack-ng wireless auditing suite.☆84Jun 23, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆113Updated this week
- Enable or Disable TokenPrivilege(s)☆16May 17, 2024Updated 2 years ago
- hacking tools☆14Jan 29, 2023Updated 3 years ago
- This Grafana dashboard offers a centralized view of Azure orphan resources that can be safely removed to reduce the overall cost of ownin…☆19Oct 22, 2024Updated last year
- Workshop for IT/Ops teams to learn how to manage AI agents on Microsoft Azure.☆85Sep 22, 2026Updated 3 weeks ago
- AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.☆29Oct 8, 2026Updated last week
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆81Sep 30, 2026Updated 2 weeks ago