HAWK M365 Analysis
These notes and scripts are based on the output from https://github.com/T0pCyber/hawk.
Hawk Incident Commands
Result Status Detail Issue
Impossible Travel Code Fragments
Some scripts to help with detecting Impossible Travel on Github.
Some other scripts to help with M365 Analysis
CrowdStrike Reporting Tool