To contribute a resource visit CONTRIBUTING
| resource | description / use case | code type |
|---|---|---|
| 0_sample_hello_world | Sample for how code should be submitted and documented in this repository | pwsh |
| CSU_Log_Pull_Library | DLL for talking to the MS O365 API | c# |
| CSU_EO_Log_Pull | Implementation of Log Pull Library to retrieve Exchange Online log dumps | c# |
| MessageTraceLogGatherer | Gathers message trace logs from M365 in order to be ingested in a SIEM | pwsh |
| O365_Clear_Forwarding | Clear forwarding on an O365 mailbox | pwsh |
| O365_Find_Forwarding_Duplicates | Pull all O365 mailbox forwards in the tenant and find duplicates | pwsh |
| O365_Get_InboxRules | Get all O365 inbox rules set on a particular mailbox | pwsh |
| O365_Get_Last_PW_Reset | Get the last password change timestamp for a particular O365 account | pwsh |
| O365_Get_Mailbox_Forwarding | Get O365 mailbox forwarding info for a particular mailbox | pwsh |
| O365_Get_Message_Trace | Pull O365 message tracking info | pwsh |
| O365_IR_Toolbox | All-in-one O365 IR toolbox that can perform the following functions: get Message Trace log, Azure AD Audit Log, Last Password Reset, Inbox Rules, Mail Forwarding, clear Mailbox Forwarding, and reset Account Password | pwsh |