Software Development

Auditing Entra ID With AADInternals

Using the AADInternals PowerShell toolkit, the skill conducts comprehensive reconnaissance of Microsoft Entra ID tenants, acquires access tokens across Microsoft APIs, and tests federation/AD FS backdoors such as Golden SAML and T1606.002. It enables security teams to validate defensive measures during authorized red‑team assessments of Entra ID and Microsoft 365 environments. By mapping the external attack surface and verifying AD FS signing certificates, it helps organizations ensure resilience against Golden SAML exploits.

Publisher / source
Cybersecurity Skills (Community)
Upstream record
mukul975/Anthropic-Cybersecurity-Skills
Version
Version 3
Published
Publication review
Approved for publication
Content fingerprint
fba44cf420cd64854b556d9a97407cd6e1788f4b781888d5b08cc0c6df50115d