Cyber security

Microsoft-Analyzer-Suite (Community Edition) : A Deep Dive Into Analyzing Microsoft 365 Security

Explore the capabilities of the Microsoft-Analyzer-Suite (Community Edition), a powerful collection of PowerShell scripts designed to enhance your security analysis.

This suite provides automated processing of logs from Microsoft 365 and Microsoft Entra ID, leveraging tools developed by Invictus-IR.

Dive into the intricacies of these tools and learn how they can bolster your cybersecurity efforts.

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID.

TL;DR

Automated Processing of Microsoft 365 Logs and Microsoft Entra ID Logs extracted by Microsoft-Extractor-Suite.

The Following Microsoft Data Sources Are Supported Yet:

Output Files of Microsoft-Extractor-Suite v1.3.5 by Invictus-IR

  • Get-ADSignInLogsGraph → ADSignInLogsGraph-Analyzer v0.1
  • Get-MFA → MFA-Analyzer v0.2
  • Get-OAuthPermissions → OAuthPermissions-Analyzer v0.2
  • Get-RiskyDetections → RiskyDetections-Analyzer v0.2
  • Get-RiskyUsers → RiskyUsers-Analyzer v0.2
  • Get-UALAll → UAL-Analyzer v0.3
  • Get-Users → Users-Analyzer v0.1
  • Get-TransportRules → TransportRules-Analyzer v0.1

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

3 days ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

3 days ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

4 days ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

7 days ago

ufw Command in Linux: Manage Firewall Rules with Examples

ufw (Uncomplicated Firewall) sits on top of iptables (or nftables on newer systems) and replaces…

7 days ago

who Command in Linux: Show All Logged-In Users and Sessions

When you share a server with a team or investigate unexpected activity, the first question…

7 days ago