untitledgoosetool
by cisagov
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
AI summary
Incident responder
A tool for investigating and responding to security incidents in cloud-based Microsoft environments.
- stars
- 917
- forks
- 80
- watching
- 17
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Incident responder tool
Automates incident response actions to gather and process forensic artefacts from remote systems
Threat detector
Tool to compare IP addresses or hostnames to threat intelligence feeds and detect potential security threats.
Response helpers
Utility library providing a set of pre-built HTTP response handlers for building RESTful APIs.
Incident Investigator
An AI-powered on-call engineer tool that automatically investigates incidents and provides contextual insights
Threat Hunter
Automated platform for discovering and analyzing cybersecurity threats targeting an organization
tclahr/uac824
Incident collector
Automates incident response data collection from various operating systems
Incident response tools
Provides tools to help respond to security incidents in Azure Active Directory by automating tasks and data retrieval.
Logon analyzer
A tool collection for analyzing and visualizing logon events to help answer security-related questions
Response toolkit
A tool designed to empower incident response and digital forensics by providing a preconfigured Windows environment with necessary tools and scripts.
Incident Manager
A platform for detecting and resolving production incidents in real-time
Tenant assessor
Automates assessment of Microsoft 365 tenant configurations against CISA's Secure Configuration Baseline policies
Incident manager
A cybersecurity incident management platform for tracking and managing security incidents in real-time.
demisto/cops151
Incident response standard
Standardized framework for creating and sharing incident response processes in a shared language
Traffic analyzer
A network traffic analysis tool suite that accepts various data formats and provides visualization and incident response capabilities.
Incident responder
A tool designed to collect data from Windows systems during an incident response
Featured in 1 awesome list
Each link jumps to the spot where the list mentions untitledgoosetool.
