Open-source PowerShell toolkit for Microsoft 365 security investigations - Read-only compromise assessment
☆87Mar 9, 2026Updated 7 months ago
Alternatives and similar repositories for M365-Investigation-Toolkit
Users that are interested in M365-Investigation-Toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆39Oct 21, 2026Updated 2 weeks ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Generate professional, audit-ready documentation of your Microsoft Intune tenant in minutes. Sign in, pick what to document, export as PD…☆63Oct 28, 2026Updated last week
- Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)☆342Oct 27, 2026Updated last week
- A freemium desktop application that provides natural language querying of Microsoft Graph APIs through local LLM integration.☆37Jul 5, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This is the repo for the Identity Masterclass at ExpertsLive Netherlands 2026.☆25Jun 14, 2026Updated 4 months ago
- A PowerShell module for the M365 admin center☆25Jun 23, 2026Updated 4 months ago
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆79Oct 22, 2026Updated 2 weeks ago
- Agentless, read-only security assessment for PowerShell 7: on-premises Active Directory, the Entra ID / Azure / Intune / Microsoft 365 id…☆83Updated this week
- A Chromium-based browser extension for deep inspection of Microsoft Entra (Azure AD) authentication and identity traffic.☆21Sep 16, 2026Updated last month
- Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.☆418Oct 28, 2026Updated last week
- A tool for checking if MFA is enabled on multiple Microsoft Services☆12Apr 5, 2026Updated 7 months ago
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆22Oct 31, 2026Updated last week
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆690Oct 26, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆32Oct 13, 2025Updated last year
- A Windows-native control plane for Microsoft Intune & Entra device management. Rust + WinUI 3 client over a .NET Graph sidecar, with a se…☆36Oct 19, 2026Updated 2 weeks ago
- ☆445Oct 22, 2026Updated 2 weeks ago
- Plug and play Azure implementation of Maester including drift detection and regression alerting☆37Oct 14, 2026Updated 3 weeks ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Share Information about Microsoft Security Products☆155Updated this week
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆255Mar 4, 2026Updated 8 months ago
- A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged object…☆529Sep 24, 2026Updated last month
- ☆34May 1, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Maester is a test automation framework to help you stay in control of your Microsoft security configuration.☆1,183Updated this week
- A PowerShell module for the Defender XDR portal☆147Updated this week
- GraphEssentials is a PowerShell module that helps with Office 365 / Azure AD using mostly Graph☆13Updated this week
- PowerShell tool for auditing Microsoft Entra ID Conditional Access policies and MFA compliance☆45Aug 2, 2025Updated last year
- ☆37Mar 2, 2026Updated 8 months ago
- Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.☆252Updated this week
- KuShu-Shimon (ISDF) provides Intune Stateful Device Fingerprinting for Cloud PCs, Dev Box, AVD, DevTest Labs, and Azure VMs. It strengthe…☆10Jan 19, 2026Updated 9 months ago
- ☆106Jun 5, 2026Updated 5 months ago
- Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MIT…☆186Oct 22, 2026Updated 2 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆24Jul 23, 2026Updated 3 months ago
- PowerShell for Active Directory, Defender XDR, Entra ID, Exchange Server, Microsoft 365, Windows, and more! ✌️☆257Oct 1, 2026Updated last month
- Root module for creating Tier Model / Delegation Model on Active Directory☆21Sep 22, 2026Updated last month
- ☆17Aug 27, 2026Updated 2 months ago
- Tools for Microsoft cloud fans☆383Nov 26, 2024Updated last year
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆487Feb 16, 2026Updated 8 months ago
- Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.☆29Updated this week