HAWK M365 Analysis

These notes and scripts are based on the output from https://github.com/T0pCyber/hawk.
Hawk Notes
Hawk Incident Commands
Result Status Detail Issue
Impossible Travel Code Fragments
Some scripts to help with detecting Impossible Travel on Github.

Some other scripts to help with M365 Analysis

CrowdStrike Reporting Tool
CISA tool