AITIR 2.0: evidence-grounded, authorized identity-threat response reference architecture.
A "Swiss Army Knife" command-line interface (CLI) for easy human and non-human interaction with @cyberark suite of products.
A modern, extensible framework for defining and enforcing security policies across your digital infrastructure.
Open-source Active Directory & Entra ID security auditor. 419+ checks, ADCS ESC1-ESC11, attack paths. 6.2× faster than PingCastle. Apache 2.0.
Small scripts and targeted tools created by Trimarc staff to help solve common issues in Identity Security.
A PowerShell tool to identify and audit user-consented applications in Microsoft Entra ID (Azure AD), with a focus on uncovering "Shadow IT" and security risks.
Security tools for purple team, AI security, and M365/GWS. Authorized use only.
Evidence-backed ownership and dependency assessment for Microsoft Entra service principals across Microsoft Graph, Azure RBAC, Activity Logs, and Azure Storage.
senhasegura Identity Threat Labs is a premier threat intelligence center specializing in predictive analysis of identity-focused attack vectors. Using reverse engineering, malware analysis, and threat intelligence, our lab identifies emerging threats and provides actionable reports to help organizations strengthen defenses and mitigate risks.
Cloud Identity Security Engineering — Go-based security research and tooling for AWS IAM attack-path analysis, privilege escalation detection, and CloudTrail-based detection engineering.
Zero Standing Privilege Gateway for Azure - JIT access for AI agents, automation, and service principals
Afterlogin: The Hunt × Helper Patrol — a cinematic identity & data-governance training game powered by real gpt-4o tool-calling agents + Foundry IQ grounding. Microsoft Agents League · Creative Apps.
A curated collection of IAM and PAM resources, insights, best practices, and implementation guidance based on my hands-on experience.
Extended version of Test-MdiReadiness.ps1 for Microsoft Defender for Identity: forest-wide scanning, required network port and NNR validation, sensor v3.x upgrade readiness, capacity estimation and a redesigned HTML report. Personal project, not an official Microsoft product.
ITDR (Identity Threat Detection and Response) platform with ML-powered anomaly detection, UEBA, risk scoring, and role mining
A portfolio of completed rooms, challenges, and CTFs from TryHackMe.com, showcasing hands-on experience with real-world cybersecurity scenarios — from hacking machines to investigating attacks. This collection highlights my practical skills across diverse technologies, reflecting my growth and learning through various cybersecurity learning paths.
A cross‑tenant migration framework for Secret Server–compatible PAM environments. It automates the transfer of Secrets, Folders, Roles, Permissions, and metadata using schema‑aware mapping, integrity checks, and auditable workflows to deliver reliable, low‑risk enterprise migrations.
Evidence-first PowerShell analyzer for Microsoft Entra dynamic-group coverage, with optional verification of direct Intune compliance-policy group assignments.
Read-only security command center for Microsoft 365 / Entra ID: failed logins, risky users, service health, mail exfiltration and device locations on one page. Runs on synthetic data with zero setup.
To associate your repository with the identity-security topic, visit your repo's landing page and select "manage topics."