untitledgoosetool

Untitled Goose Tool is a comprehensive hunt and incident response utility designed for investigations within Microsoft Entra ID, Azure, and M365 environments. It enhances traditional incident response by providing advanced authentication methods and collecting telemetry from Microsoft Defender for Endpoint and Defender for Internet of Things, enabling teams to export cloud artifacts effectively from environments lacking proper log ingestion into SIEMs. Notable features include a flexible GUI, CSV output capabilities, and recommended workflows for various incident handling scenarios.