You should get MAAD-AF about emulating attacks – it goes a long way by Arpan Sarkar

MAAD-AF is an open-source Microsoft 365 and Azure AD attack framework designed to emulate real adversary tactics for both pre- and post-compromise scenarios, enabling security teams to test configurations, detections, and response using living-off-the-land techniques with minimal setup. The tool provides intuitive modules focused on commonly targeted Microsoft cloud services, supports reconnaissance and credential brute-forcing, and is available on GitHub with invitations for community contributions and resources such as webinars and guides.