Six Degrees of Domain Admin
Repository Index
79,841 visible repositories in the index
1–4 of 4 · Most stars
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
- azureactivedirectory
- itdr
- microsoftentraid
- microsoftsentinel
WAU daily updates apps as system and notify connected users. (Allowlist and Blocklist support)
- winget
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.