cloud-architekt/azuread-attack-defense

This repository is a static Microsoft Entra ID attack-and-defense playbook, not an executable service. Security practitioners use its scenario chapters to understand attacks, review detection and mitigation guidance, and map scenarios and detections to MITRE ATT&CK. Supporting assets include KQL detections, analyzer configuration and deployment templates, and ATT&CK mapping data. The README documents these relationships; no source excerpts were provided, so the graph does not infer runtime calls or execution order.