Skip to content
View Dfrank77's full-sized avatar
2 followers · 0 following

Block or report Dfrank77

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Dfrank77/README.md

Darius Frank

IAM and cloud security engineer building open-source Entra ID security tooling.

Portfolio: dfrank-iam.com

Entra ID Security Suite

Tool What it does
entra-blast-radius Compute an identity's full reachable privilege set, ranked worst-first
entra-attack-path-visualizer Detect privilege escalation paths through roles, groups, and PIM
entra-zt-policy-engine Audit Conditional Access against CIS benchmarks, deploy fixes via Terraform
entra-workload-identity-scanner Audit app registrations and service principals for overprivilege and stale credentials
entra-orchestrator Correlate findings across all scanners into one report
entra-security-report Shared findings model and HTML renderer used by the suite

All tools run against any Entra ID tenant via Microsoft Graph with delegated permissions. Each tool runs against a test tenant I seeded with Terraform to simulate realistic scale.

Stack

Python, Microsoft Graph API, Terraform (azuread provider), aiohttp, NetworkX

Links

Pinned Loading

  1. entra-blast-radius entra-blast-radius Public

    Compute an Entra ID identity's blast radius: everything it can reach - roles, nested groups, PIM-eligible, owned apps - ranked worst-first.

    Python

  2. entra-orchestrator entra-orchestrator Public

    Cross-tool correlation engine for the Entra ID security suite — joins findings across three scanners to surface risks no single tool detects.

    Python 2

  3. entra-attack-path-visualizer entra-attack-path-visualizer Public

    Automated detection of privilege escalation paths in Microsoft Entra ID

    Python

  4. entra-zt-policy-engine entra-zt-policy-engine Public

    Zero Trust Conditional Access policy engine for Microsoft Entra ID. Audits existing policies against CIS benchmarks and deploys gap-closing policies via Terraform.

    HTML

  5. entra-workload-identity-scanner entra-workload-identity-scanner Public

    Scans Entra ID app registrations and service principals for overprivileged permissions, expired credentials, ownerless apps, and stale workload identities. Emits a self-contained HTML report.

    Python 1

  6. entra-security-report entra-security-report Public

    Shared findings model, storage, and HTML renderer for the Entra ID security suite"

    Python