CISA releases tool to review Microsoft 365 post-compromise activity

The new tool helps security teams visualize and analyze data outputs generated using Sparrow, an open-source PowerShell-based tool for detecting potentially compromised applications and accounts.