Reportly is an AzureAD user activity report tool.

About the tool

This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following:

1. Information about the user
2. Actions taken by the user
3. Actions taken on the user
4. User login and failure logs

Usage

When running the tool, a link to authentication and a device …

actions authentication azuread blue cloud code device incident information input link login logs microsoft report researcher taken teams tool