Untitled Goose Tool Takes Flight: Azure AD and M365 Account Compromises by John Mancini

This piece introduces CISA’s open-source Untitled Goose Tool for gathering Azure AD, M365, and Azure logs, then positions Vectra’s Threat Detection and Response platform as an automated, real-time solution that ingests similar and additional logs to streamline detection, investigation, and response to cloud-based threats, offering raw data access, rich querying, and simplified workflows.