Skip to content

Instantly share code, notes, and snippets.

@invictus-korstiaan

invictus-korstiaan/Invoke-SecurityGroupCloner.csv

Created October 27, 2023 09:29
Show Gist options
  • Save invictus-korstiaan/4e8d7ec04a383b9da38976d32f224849 to your computer and use it in GitHub Desktop.
Save invictus-korstiaan/4e8d7ec04a383b9da38976d32f224849 to your computer and use it in GitHub Desktop.
Download ZIP
Invoke-SecurityGroupCloner
Raw
Invoke-SecurityGroupCloner.csv
Log source Indicator
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/groups/{ID}/members
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/groups/{ID}/members/$ref
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/groups?=securityEnabled%20eq%20true
MicrosoftGraphActivityLogs https://graph.microsoft.com/v1.0/me
Entra ID Audit Log Add member to group
Entra ID Audit Log Add group
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment