This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
[Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks
A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.