f-bader Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

adfswebcustomization

A repository of useful Web Customizations for Active Directory Federation Services

adsec

An introduction to Active Directory security

amazing-icon-downloader

Easily find and download SVG icons from the Microsoft Azure portal.

atadocs

Public content repo for ATA documentation in OPS

azautomation-poshacme

Automatically create and renew Let’s Encrypt certificates using Azure Automation and the Posh-ACME module

azsentinelqueries

Repository with Sentinel Analytics Rules and Hunting Queries

azure-docs

azure-powershell

Microsoft Azure PowerShell

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azureadexporter

PowerShell module to export a local copy of all Azure Active Directory configuration settings and objects.

azurehound

azuresimplerest

Simple and lightweight access to Azure REST API calls mostly not available through the AzureRM module or originals not suitable for my needs. Uses the authentication of AzureRM module.

bark

BloodHound Attack Research Kit

chroma

A general purpose syntax highlighter in pure Go

cloudarchitektazuresentinel

Sharing my KQL queries for Azure Sentinel

conditionalaccessdocumentation

Azure AD Conditional Access Documentation with PowerShell

dbachecks

SQL Server Environmental Validation

defenderharvester

Expose a lot of MDE telemetry that is not easily accessible in any searchable form

devicecode2winhello

A small script that automates Entra ID persistence with Windows Hello For Business key

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

dscworkshop

entraid-errorcodes

Entra ID (Azure AD) error codes as JSON

entraidauditlogtomicrosoftgraph

A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri

entraidpasskeyhelper

PowerShell module to manage the Entra ID device-bound passkey feature

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

falconhound

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool.

forgecert

"Golden" certificates

gporeport

A PowerShell function to search for specific group policy settings in all GPOs in a large enterprise environment

gpregistrypolicy