detecting-entra-offensive-tools-in-graph-logs

Name: detecting-entra-offensive-tools-in-graph-logs
Author: adriannoes

SKILLWorkflowcommunity

v0.0.0adriannoesMITUpdated 1mo agoSource →

Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics for fingerprints of offensive Entra ID tools such as ROADtools, AADInternals, and AzureHound.

Community-submitted skill. Not yet reviewed by the Forge team. Full prompt content may not be available.Request review →

48Repo stars

1Clients

1Formats

1mo agoLast update

Skill

Authoradriannoes

Version0.0.0

LicenseMIT

CategoryWorkflow

Formatsskill.md

PromptNot published

Compatibility

Claude✓ Supported

Cursor—

Copilot—

ChatGPT—

Gemini—

About

Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics for fingerprints of offensive Entra ID tools such as ROADtools, AADInternals, and AzureHound.

Keywords

skillclaude

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.

Topics

Related in monitoring & logging

agent-deviceMobile app automation and verification for AI coding agents. CLI, MCP server, and typed No
kubesphere/kubesphereThe container platform tailored for Kubernetes multi-cloud, datacenter, and edge managemen
open-metadata/OpenMetadataThe Open Context Layer for Data and AI , OpenMetadata is the open platform for building t
maximhq/bifrostFastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, clust
IBM/mcp-context-forgeAn AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs,
io.github.grafana/mcp-grafanaAn MCP server giving access to Grafana dashboards, data and more.
grafana/mcp-grafanaMCP server for Grafana — query dashboards, explore metrics, manage alerts
@winor30/mcp-server-datadogMCP server for interacting with Datadog API