#cyber-security-tools — Public Fediverse posts

----------------

🛠️ Tool
===================

EntraFalcon is a PowerShell-based assessment tool designed for pentesters, security analysts, and system administrators to evaluate the security posture of Microsoft Entra ID environments.

Key Features
• Compatible with PowerShell 5.1 and 7 on both Windows and Linux.
• Does not require additional PowerShell modules or installations.
• Bypasses Microsoft Graph API consent prompts by using first-party Microsoft applications with pre-consented scopes.
• Generates navigable HTML reports that support filtering, sorting, and data export.

Technical Implementation
• Performs over 90 automated checks summarized in a Security Findings Report.
• Evaluates weak tenant configurations, risky object properties, and excessive permissions.
• Calculates basic impact, likelihood, and risk scoring to highlight weakly protected high-privilege objects.
• Enumerates a wide array of Entra ID objects including Agent Users, PIM assignments (Entra Roles, Groups, Azure Roles), Entra Role Assignments, Intune RBAC, Access Packages, and Conditional Access Policies.

Use Cases
• Auditing external or internal enterprise applications with excessive permissions.
• Identifying privileged accounts synced from on-premises.
• Detecting inactive users or users lacking MFA capability.
• Finding unprotected groups used in sensitive assignments like Conditional Access exclusions.

Setup and Requirements
• Requires the Global Reader role in Entra ID.
• Optionally requires the Reader Azure role on every Management Group or Subscription to assess Azure IAM assignments.
• Clone the repository and run the script with the -AuthFlow BroCi parameter for the default interactive authentication flow.

🔹 EntraID #PowerShell #MicrosoftGraph #CybersecurityTools #tool

🔗 Source: https://github.com/CompassSecurity/EntraFalcon?utm_content=bufferace7a&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer

Admin Console 17.10.2 builds upon features introduced in 17.9.0 and 17.10.0.

- Admins can configure approval workflows for AI-related request types introduced with the Agentic AI Governance feature for Keeper Endpoint Privilege Manager.
- Admins can directly view Non-Human Identity UIDs, including specific app UIDs for Keeper Secrets Manager devices.
- New event types for Advanced Reporting and Alerts Module include Revealed Password, Moved Folder, Updated Folder and Moved Record.

#KeeperSecurity #IdentitySecurity #CybersecurityTools

Keeper Commander 18.0.10 introduces new features, including:

- Vault-style passphrase generation
- New [pam action service map] command to map users to discovered Windows services.
- KeeperAI setting [pam connection ai] now supports [--enabled]/[-e] and [--session-terminate]/[-st] flags to configure resource-level AI settings

#KeeperSecurity #CybersecurityTools #DeveloperTools

NCSC Tests Honeypots and Cyber Deception Tools https://thecyberexpress.com/ncsc-tests-honeypots-and-cyber-deception-tools/ #TheCyberExpressNews #cybersecuritytools #TheCyberExpress #deceptiontools #FirewallDaily #Cyberdefenses #cybersecurity #CyberNews #honeypots #NCSC

From Automation to Augmentation: The Future of SOCs in Enterprise Cybersecurity https://thecyberexpress.com/ai-augmented-socs-future-of-cybersecurity/ #SecurityOperationsCentres #cybersecuritycapability #TheCyberExpressNews #cybersecuritytools #TataCommunications #ThreatIntelligence #TheCyberExpress #FirewallDaily #GenerativeAI #AgenticAI #SOARtools #Features #SOCs

Cybersecurity Tool of the Day: Wireshark 🦈

Your Friendly Network Detective! 🕵️

🔍 Ever wondered what’s really going on in your network?
💻 Wireshark is the world's most popular network protocol analyzer!

✨ With Wireshark, you can:

🔹Visualize real-time data traffic
🔹Inspect protocols at every level
🔹Spot anomalies and troubleshoot issues
🔹Monitor your system for suspicious activities
🔹Learn how devices communicate on the web

It’s like X-ray vision for your internet connection!
Perfect for students, IT pros, or just curious minds!

Note: Wireshark is a legal and powerful analysis tool — it’s used for diagnostics and learning, not for any unauthorized spying!

⚠️ Use only on networks you own or have permission to analyze!

Ready to explore your digital world? Let Wireshark guide you!

Download it at: wireshark.org

#Wireshark #CybersecurityTools #NetworkAnalyzer #TechTips #InfosecDaily #LearnCybersecurity #DigitalSafety #EthicalTech #CyberAwareness

Cybersecurity Isn’t a Fad—It’s a Fight #CybersecurityNoobs #ScriptKiddies #CyberSecurityEngineers #PenetrationTesting #CyberSkills #NoobsInCyberSecurity #DeadSwitch #LearnCybersecurity #CyberSecurityTools #SecurityExperts #CyberWarriors #RealHackers #IndustryStandards #HackerCulture

http://tomsitcafe.com/2025/04/13/%f0%9f%a4%a1-cybersecurity-isnt-a-fad-its-a-fight/

#misconfigmapper: an open source tool to help uncover security misconfigurations on popular third-party services... 👇 :thinking: :thinking:

https://github.com/intigriti/misconfig-mapper?tab=readme-ov-file

#cybersecurity #cybersecuritytools

Hello everyone.

In today's article, we are performing ip and ethernet sniffing with c++.

I wish everyone good work and reading.
https://denizhalil.com/2024/12/30/network-monitoring-cpp-ip-ethernet/

#cppnetworking #cppprogramming #cppprogramming #cybersecuritytools #ethernetsniffing #ippacketanalysis #networkanalysis #networksecurity

hello everyone.
in today's article we are writing a port scanner tool with c++.

I wish everyone a good reading and work.
https://denizhalil.com/2024/12/11/build-cpp-port-scanner-tool/

#cppprogramming #cybersecuritytools #ethicalhacking #networksecurity #portscanner #socketprogramming

MITRE ATT&CK Coverage by Security Tools Is Inconsistent, Incomplete: Researchers https://thecyberexpress.com/mitre-attack-coverage-by-security-tools/ #endpointdetectionandresponse(EDR) #TheCyberExpressNews #cybersecuritytools #EndpointSecurity #TheCyberExpress #FirewallDaily #MITREATT&CK #CyberNews #SIEM #EDR

Cybersecurity 10 Essential Tools For Dynamic Malware Analysis
In the ever-evolving world of cybersecurity, staying ahead of malicious threats is crucial. One of the key strategies in combating malware is dynamic malware ana...
#Cybersecurity #MalwareAnalysis #EssentialTools #DynamicMalwareAnalysis #CybersecurityTools #ITSecurity #InfoSec #MalwareProtection #DigitalSecurity #MalwareTools #CyberAttacks #DataProtection #InternetSafety #ComputerSecurity #news #tech #hackers
https://cloudhosting.evostrix.eu/cybersecurity-10-essential-tools-for-dynamic-malware-analysis/

#Mantis: a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning 👇💡

https://github.com/PhonePe/mantis

#cybersecurity #cybersecuritytools #vulnerabilities

#ActuLibre Evaluating Your Security Controls? Be Sure to Ask the Right Questions -> http://feedproxy.google.com/~r/TheHackersNews/~3/N5OSKqSsEfY/cybersecurity-controls-framework.html #automatedpenetrationtesting #Penetrationtestingtools #vulnerabilityassessment #cybersecuritytools #PenetrationTesting #cybersecurity

#ActuLibre Top 5 Cybersecurity and Cybercrime Predictions for 2020 -> http://feedproxy.google.com/~r/TheHackersNews/~3/45amUES0zas/cybersecurity-predictions-2020.html #cybersecurityprofessionals #CybersecurityPredictions #cybersecuritytools #enterprisesecurity #websitesecurity #cybersecurity #hackingnews

#ActuLibre How MSPs can become Managed Detection and Response (MDR) Providers -> http://feedproxy.google.com/~r/TheHackersNews/~3/16q-_72G7qw/managed-detection-response.html #ManagedDetectionandResponse #cybersecuritysoftware #incidentresponsetool #cybersecuritytools #networksecurity #cybersecurity #Cynet