This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Josh Lemon
joshlemon.bsky.social
did:plc:4io6hn6pccxdum3zwaaudmsy
🚨 Alert on new credentials added to SPs.
🔥 Monitor changes to federated domains (federationConfiguration).
🕵🏼♂️ Hunt unusual Graph API calls to /domains, /credentials, and /federationConfiguration.
#DFIR #ThreatHunting #EntraID #CloudForensics #M365 #ThreatDetection
2025-07-19T04:18:50.458Z