detecting-entra-offensive-tools-in-graph-logs

Name: detecting-entra-offensive-tools-in-graph-logs
Author: adriannoes

SKILLWorkflowcommunity

v0.0.0adriannoesMITUpdated 1d agoSource →

Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics for fingerprints of offensive Entra ID tools such as ROADtools, AADInternals, and AzureHound.

Community-submitted skill. Not yet reviewed by the Forge team. Full prompt content may not be available.Request review →

48Repo stars

1Clients

1Formats

1d agoLast update

Skill

Authoradriannoes

Version0.0.0

LicenseMIT

CategoryWorkflow

Formatsskill.md

PromptNot published

Compatibility

Claude✓ Supported

Cursor—

Copilot—

ChatGPT—

Gemini—

About

Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics for fingerprints of offensive Entra ID tools such as ROADtools, AADInternals, and AzureHound.

Keywords

skillclaude