🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

AzureGoat : A Damn Vulnerable Azure Infrastructure

A tool for checking if MFA is enabled on multiple Microsoft Services

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

Azure Resource Inventory - It's a Powerful tool to create EXCEL inventory from Azure Resources with low effort

A collection of scripts for assessing Microsoft Azure security

Azure Resource Inventory - It's a Powerful tool to create EXCEL inventory from Azure Resources with low effort

Azure Review Checklists helps ensure you are following Microsoft best practices and recommendations across Platform, Applications and Services on Azure

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

The Azure Cloud Native Architecture Mapbook, published by Packt

This is a step-by-step guide to implementing a DevSecOps program for any size organization

Welcome to the Microsoft Defender for Cloud community repository

Web Attack Cheat Sheet

Providing Security in DevOps (The Effort to strive for "Secure by Default")

Software Development Lifecycle

Cloud Application Security

NextJS-based single-page application for completing and reviewing SAMM assessments