CISA Ships ‘Untitled Goose Tool’ to Hunt for Microsoft Azure Cloud Infections

Azure network defenders can use the tool to export and review sign-in audit logs and activity alerts from a range of Azure and Microsoft Defender environments to pinpoint signs of suspicious activity.