See below for a list of Microsoft Azure Tools.
| Tool | Description |
|---|---|
| Blue-team-app-Office-365-and-Azure | The Blue team app for Office 365 and Azure is developed to help you investigate the Microsoft 365 Audit log. |
| Cado's Import UI | Cado's Import UI - Cloud Data Importing Tool |
| cloudgrep | cloudgrep is grep for cloud storage. It currently supports searching log files, optionally compressed with gzip (.gz) or zip (.zip), in AWS S3, Azure Storage or Google Cloud Storage. |
| Microsoft-Extractor-Suite | A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes. |
See below for a list of Microsoft Azure Artifacts.
| Artifact or Process | Resource |
|---|---|
| Azure Cloud Forensics | The Importance of Depth: Cloud Forensics Beyond Log Analysis |
| Azure Incident Response | How to be IR prepared in Azure |
| Microsoft Graph API | Everything you need to know about the MicrosoftGraphActivityLogs |
| Microsoft Sentinel | Demystifying Log Collection in Azure: Navigating Windows and Linux Server Logging for Microsoft Sentinel |