Infosec-Startpage

Pages / Tools (65)

Curated pages, tools and references from the bi-sec catalog.

Name	Description	Tags	Added
365 Inspect	M365 Security Audit Tool	Tools Entra ID Microsoft Azure M365	2024-01-05
AADInternals	PowerShell-Tool for Azure and M365	Tools Microsoft Azure AD M365 Entra ID	2024-01-05
Active Directory Attack Cheat Sheet	Active Directory Attack Tool	Active Directory AD Audit	2024-02-16
Active Directory Misconfiguration Guide	Active Directory Misconfigurations	Active Directory AD Config Audit	2024-02-16
Adalanche AD Audit	Active Directory Attack Path Audit and Visualization	Active directory Audit Tools	2024-02-16
Analysis Tools	Overview of static analysis tools and linters	DevOps DevSecOps	2024-02-23
AzAdvertizer	Change-Tracking for Azure-Policies	Tools Microsoft Azure M365 Audit	2024-01-05
Azure Tiering	Basic infos for privileged permissions to build a tier model in azure	Azure AD Entra ID M365 Administration Tiering	2024-08-30
Azure-Red-Team	Collection of Tools and hints for Azure pentesting	Pentesting Microsoft Azure AD M365	2024-01-05
BleepingComputer	English IT- / IT-Security News	IT-News English	2024-01-05
Bloodhound	Audit-Tool to find attack paths in a Windows Domain / Entra Environment	Tools Hardening Azure AD Active Directory Microsoft Entra ID	2024-08-30
BSI (Federal Office for Information Security)	Security Baseline /IT-Grundschutz from german Bundesamt für Sicherheit in der Informationstechnik	BSI Grundschutz Standards Framework Cybersecurity	2024-01-09
CIS Benchmarks	Security-Benchmarks for various platforms	Audit Security Benchmarks	2024-01-05
CISCO TALOS	Threat Intelligence and IP reputation	CTI Reputation	2024-01-05
cmd.ms	Project for Microsoft Cloud command lines	M365 Azure Microsoft Cloud	2024-09-01
CTI-Threat Intel	CTI for different Topics	CTI Ransomware	2024-01-02
CVE Crowd	Highly discussed CVEs from Fediverse	CVE IOC Exploits	2024-02-27
Cyber Security Roadmap overview	Collection of Cybersecurity stuff	Cybersecurity Infopage Learning	2024-01-12
DCToolbox	PowerShell-Toolbox for M365 and Azure	Tools Microsoft Azure AD M365 Entra ID	2024-01-05
DORA	Digital Operational Resilience Act (DORA)	Standards Cybersecurity Regulations	2024-01-09
Entra Audit Log Categories	Overview of Entra Logging	Microsoft Azure M365	2024-01-05
evilginx	Man-in-the-Middle attack tool	Tools MitM-Attack Tool M365 Azure AD Entra ID	2024-01-05
Golem	German IT-News	IT-News German	2024-01-05
GraphRunner	M365 attack tool	Tools Azure AD M365 Entra ID Post-Exploitation	2024-01-05
HardeningKitty	Audit-Tool to find Vulnerabilities and insecure configuration in Windows	Tools Hardening Windows Microsoft	2024-08-30
HaveIBeenPwned	Check your email for compromise in breaches	Password Security Breaches	2024-01-05
Heise	German IT-News	IT-News German	2024-01-05
Hunting with YARA	IOC	CTI Malware YARA Tools	2024-02-16
InTheWild.io	OpenSource collection of vulnerabilities that are exploited in the wild	CVEs Exploits CTI Ransomware	2024-08-30
IntuneManagement	PowerShell-Tool to manage M365 and Azure	Tools Microsoft M365 Azure Intune	2024-01-05
LOLBAD Project	Project that collects Living off the Land Binaries and Scripts	Exploits Ransomware Windows LOLBINS	2024-08-30
M365 Admin Tiering	Administrative tier model for M365 and Azure	M365 Entra ID Azure AD Administration Tier Attack Paths	2024-08-26
M365 Feature Matrix	License and Feature Overview for M365	M365 Microsoft License	2024-01-05
Maester	M365 / Entra / Azure Security Testing Automation	M365 Entra ID Azure AD Audit Hardening Tools	2024-08-26
Malware IOCs	IOCs for different Malware	Malware IOC Ransomware CTI	2024-01-02
Microsoft DFIR-Blogpost	Microsoft Lessons Learned Blog on Attacks	Blog Microsoft M365	2024-01-05
Microsoft Portals	Overview of M365 and Azure Administration Portals	Microsoft Azure M365	2024-01-05
Microsoft Security Compliance Toolkit	Hardening Tool for Windows Systems	Tools Hardening Windows Microsoft	2024-08-30
Microsoft365DSC	Project for automating tasks in M365 using PowerShell Desired State Configuration	M365 Azure Microsoft Cloud	2024-09-01
Mimikatz	Attack-Tool for Credential-Theft in Windows	Tools Windows Exploitation Hacking Microsoft Tokens Pass-the-Hash	2024-08-30
MITRE ATT&CK	MITRE ATT&CK Database TTPs	TTPS Attacks Mitre	2024-01-05
Monkey365	Audit-Tool for Microsoft 365	Tools Azure AD M365 Entra ID Exo Teams	2024-01-05
NIS2	EU Regulations	Cybersecurity Standards Regulations	2024-01-09
NIST	US Cybersecurity Framework from National Institute of Standards and Technology	Standards Framework Cybersecurity	2024-01-09
NVD Vulnerability Database	Search Vulnerabilities and CVEs	CVE Vulnerabilities	2024-01-05
o365spray	M365 attack tool	Tools Azure AD M365 Entra ID Brute-Force	2024-01-05
ORCA	Microsoft Defender for Office 365 Recommended Configuration Analyzer	Tools Azure AD M365 Entra ID Exo Teams	2024-01-05
Overview of IOCs and CTI	Threat-Intel and IOC collection	CTI IOC Malware Ransomware	2024-01-02
PingCastle	Audit-Tool for Windows Domains / Entra	Tools Hardening Azure AD Active Directory Microsoft Entra ID	2024-08-30
ProcessHacker	Attack-Tool for Impersonation in Windows	Tools Windows Exploitation Microsoft	2024-08-30
PSD2	German payment regulatory by German Bundesbank	Standards Cybersecurity Regulations	2024-01-09
ROADtools	M365 attack tool	Tools Azure AD Entra ID M365 Token attack	2024-01-05
ScubaGear	M365 Audit tool from CISA	Tools Azure AD Exchange Online Teams Entra ID M365	2024-01-05
Seatbelt	Audit-Tool to find attack points in Windows	Tools Windows Hardening Microsoft	2024-08-30
SharpChrome	Attack Tool for Chrome	Tools Windows Hardening	2024-08-30
SharpUp	Audit-Tool to find attack points in Windows	Tools Windows Hardening Exploitation Microsoft	2024-08-30
TeamsPhisher	Tool to automate Phishing-Attacks via Teams	Tools Hacking Microsoft Teams M365	2024-09-01
TokenTactics	M365 Token Hacking Tool	Tools Windows Microsoft Token attack Azure M365 Entra ID	2024-08-30
TREVORspray	M365 attack tool	Tools Azure AD Password-Spray Brute-Force Entra ID M365	2024-01-05
TweetFeed	IOC Collections from X	IOC CTI Malware	2024-02-16
UACMe	Project with Bypass options for UAC in Windows	Tools Exploits Windows Microsoft	2024-08-30
Vulnerability Advisories	Github Advisory Database	Advisories Vulnerabilities	2024-01-02
winPeas	Audit-Tool to find attack points in Windows	Tools Windows Hardening Exploitation Microsoft	2024-08-30
Yara Basics and Downloads	All you need for starting with YARA	YARA Malware Ransomware	2024-01-02
Yara Rules Collection	YARA-Rules for Malware analysis	Malware Ransomware YARA	2024-01-02

People (20)

People and accounts covering Microsoft, cloud and security topics.

Name	Topics	Website / GitHub	X / Twitter
Benjamin Delphy	Mimikatz Windows	github.com/gentilkiwi	@gentilkiwi
Bert Jan	SOC KQL SIEM Threat Hunting	github.com/Bert-JanP	@BertJanCyber
Christian Biehler	Windows M365 Azure Microsoft	www.bi-sec.de/blog	@cssec
Clandestine	OSINT Threat Intelligence	—	@akaclandestine
Daniel Chronlund	Azure AD M365 Entra ID Microsoft	github.com/DanielChronlund	@danielChronlund
Dirk Jan	Azure AD Active Directory Microsoft	github.com/dirkjanm	@_dirkjan
Emilien Socchi	M365 Azure AD Entra ID	www.emiliensocchi.io/	@emiliensocchi
Fabian Bader	Microsoft Azure AD Active Directory Azure	github.com/f-bader	@fabian_bader
Florian Roth	YARA DFIR Loki	github.com/Neo23x0	@cyb3rops
Jan Geisbauer	Microsoft Defender M365	github.com/jangeisbauer	@JanGeisbauer
Merill	Entra ID	entra.news github.com/merill	@merill
Nestori Syynimaa	Microsoft Azure AD Entra ID	—	@drazuread
Olaf Harton	Microsoft Defender	github.com/olafhartong	@olafhartong
Oliver Kieselbach	Microsoft Windows Entra ID Intune	github.com/okieselbach	@okieselb
Paula Januskiewicz	Microsoft Azure Windows	—	@PaulaCqure
rootsecdev	Cloud Penetrationtesting	—	@rootsecdev
Sami Laiho	Microsoft Windows	win-fu.com	@samilaiho
Sami Lamppu	Cloud Security M365 Microsoft	—	@samilamppu
Steve Syfuhs	Microsoft Windows Kerberos NTLM	—	@SteveSyfuhs
Vincent Le Toux	PingCastle Mimikatz Microsoft Windows	github.com/vletoux	@mysmartlogon

RSS sources (34)

Currently configured feed sources in this application.

Name	Category	Feed URL	Status
Alle Veröffentlichungen Default	News	https://www.bafin.de/DE/service/rss/_function/rssnewsfeed.xml?nn=150166	OK
Andrew Taylor Default	News	https://andrewstaylor.com/feed/	OK
Azure Updates Default	News	https://www.microsoft.com/releasecommunications/api/v2/azure/rss	OK
Entra.News - Your weekly dose of Microsoft Entra Default	News	https://entra.news/feed	OK
heise online Top-News Default	News	https://www.heise.de/newsticker/heise-top-atom.xml	OK
Microsoft 365 Roadmap Default	News	https://www.microsoft.com/microsoft-365/RoadmapFeatureRSS	OK
Microsoft Learn - ""features are generally available (GA) in the latest release of Microsoft Defender for Endpoint"" Default	News	https://learn.microsoft.com/api/search/rss?search=%22features+are+generally+available+%28GA%29+in+the+latest+release+of+Microsoft+Defender+for+Endpoint%22&locale=en-us&facet=	OK
Microsoft Learn - ""Release notes - Azure Active Directory"" Default	News	https://learn.microsoft.com/api/search/rss?search=%22Release+notes+-+Azure+Active+Directory%22&locale=en-us	OK
Microsoft Tech Community - Latest Blogs - Microsoft Entra Blog Default	News	https://devblogs.microsoft.com/identity/feed/	OK
Aktuelle CERT-Bund Kurzinfos Default	Security	https://wid.cert-bund.de/content/public/securityAdvisory/rss	OK
Azure Updates – Security Default	Security	https://www.microsoft.com/releasecommunications/api/v2/azure/rss	OK
Bad Sector Labs Blog Default	Security	https://blog.badsectorlabs.com/feeds/all.atom.xml	OK
Blog Default	Security	https://feeds.feedburner.com/akamai/blog	OK
BSI RSS-Newsfeed Presse-, Kurzmitteilungen und Veranstaltungshinweise Default	Security	https://www.bsi.bund.de/SiteGlobals/Functions/RSSFeed/RSSNewsfeed/RSSNewsfeed_Presse_Veranstaltungen.xml	OK
Check Point Research Default	Security	https://research.checkpoint.com/feed	OK
CISA - Known exploited vulnerabilities catalog Default	Security	https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv	Error
Golem.de - Security Default	Security	https://rss.golem.de/rss.php?tp=sec&feed=RSS2.0	OK
Google Online Security Blog Default	Security	https://security.googleblog.com/atom.xml	OK
heise security Alerts Default	Security	https://www.heise.de/security/rss/alert-news-atom.xml	OK
heise security News Default	Security	https://www.heise.de/security/news/news-atom.xml	OK
Malwarebytes Default	Security	https://www.malwarebytes.com/blog/feed/index.xml	OK
Microsoft Security Blog Default	Security	https://www.microsoft.com/en-us/security/blog/feed/	OK
Microsoft Security Response Center Default	Security	https://www.microsoft.com/en-us/security/blog/feed/	OK
PortSwigger Research Default	Security	https://portswigger.net/research/rss	OK
Qualys Security Blog Default	Security	https://blog.qualys.com/feed	OK
Security-Insider \| News \| RSS-Feed Default	Security	https://www.security-insider.de/rss/news.xml	OK
This Week In 4n6 Default	Security	https://thisweekin4n6.wordpress.com/feed/	OK
BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) Default	Vulnerabilities	https://wid.cert-bund.de/content/public/securityAdvisory/rss	OK
Cisco Security Advisory Default	Vulnerabilities	https://sec.cloudapps.cisco.com/security/center/psirtrss20/CiscoSecurityAdvisory.xml	OK
Citrix Knowledge Center : Security Bulletins Default	Vulnerabilities	https://www.citrix.com/blogs/tag/security/feed/	OK
FortiGuard Labs \| FortiGuard Center - IR Advisories Default	Vulnerabilities	https://www.fortiguard.com/rss/ir.xml	OK
inthewild.io Default	Vulnerabilities	https://raw.githubusercontent.com/gmatuz/inthewilddb/master/rss.xml	OK
Microsoft Security Advisories - MSRC Default	Vulnerabilities	https://api.msrc.microsoft.com/update-guide/rss	OK
Sophos News Default	Vulnerabilities	https://feeds.feedburner.com/sophos/dgdY	OK