Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

Incident ResponseObservabilityOpen Source

About

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Microsoft Entra ID, Azure, and M365 environments. Untitled Goose Tool gathers additional telemetry from Microsoft Defender for Endpoint (MDE) and Defender for Internet of Things (IoT) (D4IoT).

Open Source Health

Not enough history
Stars
965
Forks
93
License
CC0-1.0
Last commit
8 months ago
Python

Related Categories

Using Untitledgoosetool?

Track its cost next to the rest of your stack and get a reminder before it renews.

Add to my stack

Vendor

Cybersecurity and Infrastructure Security Agency

Commit today, secure tomorrow

View vendor profile

More by Cybersecurity and Infrastructure Security Agency