This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.