Earlier this year, Microsoft detected a cyberattack on its internal systems exploiting legacy accounts and misconfigurations. Now is the time to take proactive action, guarding against the possibility of supply chain attacks targeting your tenant.
With our free PowerShell script, identify misconfigurations and elevated app permissions that malicious actors can use to hack your Microsoft tenant.
This script, created by 9-time MVP Vasil Michev and CTO Ivan Fioravanti, generates various reports available in HTML, CSV and Excel:
The script delivery is not packaged so that you can review the script before implementing.
In a PowerShell session, run each script of the following scripts:
Each script outputs various files in HTML, CSV and Excel: a full list of apps with access to your tenant and two filtered files with privileges targeted by the Midnight Blizzard group to attack Microsoft 365 tenants on Entra or Exchange side.
If you need help understanding the report, contact our experts.