Module 11 Links and Resources
DISABLING AUDITING

Exchange Online PS Module:
https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-enable-disable?view=o365-worldwide

__________________
SPOOFING AZURE SIGN-IN LOGS

Secureworks Blog:
https://www.secureworks.com/research/azure-active-directory-sign-ins-log-tampering
https://aadinternals.com/post/hybridhealthagent/

Hybrid Health Agent @DrAzureAD
https://aadinternals.com/post/hybridhealthagent/

_________________
REGISTERING FAKE AGENTS

Hybrid Health Agent @DrAzureAD
https://aadinternals.com/post/hybridhealthagent/