At the end of March 2023, CISA released a new tool called ‘Untitled Goose.’ It is a post-incident hunting tool to help security practitioners sift through security logs in the Microsoft Cloud. In this blog, we discuss the tool, its uses, and our opinion on it.

The post Using ‘Untitled Goose’ to Investigate Account Compromise in the Microsoft Cloud appeared first on Practical 365.