Azure-AD-Incident-Response-PowerShell-Module
by AzureAD
The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.
AI summary
Incident response tools
Provides tools to help respond to security incidents in Azure Active Directory by automating tasks and data retrieval.
- stars
- 424
- forks
- 49
- watching
- 23
Similar projects
Found by comparing what the projects do, not just their names.
Azure AD Assessment Tool
A toolset for assessing the state and configuration of Azure Active Directory tenants using PowerShell scripts.
Attack defense playbook
A collection of attack scenarios and mitigation strategies for Microsoft Entra ID
Azure attacker toolkit
A PowerShell module for interacting with Azure and Azure AD from an offensive perspective.
Incident responder tool
Automates incident response actions to gather and process forensic artefacts from remote systems
Directory service tools
Tools for interacting with and auditing directory services, including Active Directory and Azure Active Directory
Network monitoring tools
Tools for monitoring network performance and availability from Azure.
Threat detector
A PowerShell module designed to detect potential security threats in Azure AD environments
Incident responder
A tool for investigating and responding to security incidents in cloud-based Microsoft environments.
Log alert deployer
Automates deployment of Azure log alerts to Log Analytics workspace
AD admin tool
A PowerShell module for administering Azure AD and Office 365
davehull/kansa1.6K
Incident responder
A modular incident response framework in Powershell
System scraper
Automated incident response tool for collecting critical system information during forensic analysis of Windows systems.
Azure auditor tool
Assists in auditing and penetration testing of Microsoft Azure cloud environments by collecting and visualizing deployment information.
Resiliency guidance
A curated catalog of resiliency recommendations for workloads running in Azure
Identity provider auth
A set of libraries and tools for authenticating users with multiple identity providers in .NET applications
