- Home
- Tools
- Security Operations
- Digital Forensics and Incident Response
- Untitled Goose Tool
Untitled Goose Tool
A robust and flexible hunt and incident response tool for investigating AzureAD, Azure, and M365 environments.

Untitled Goose Tool
A robust and flexible hunt and incident response tool for investigating AzureAD, Azure, and M365 environments.
Untitled Goose Tool Description
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments. It gathers additional telemetry from Microsoft Defender for Endpoint (MDE) and Defender for Internet of Things (D4IoT). This tool assists incident response teams by exporting cloud artifacts after an incident for environments that aren't ingesting logs into a Security Information and Events Management (SIEM) or other long term solution for logs.
Untitled Goose Tool FAQ
Common questions about Untitled Goose Tool including features, pricing, alternatives, and user reviews.
Untitled Goose Tool is A robust and flexible hunt and incident response tool for investigating AzureAD, Azure, and M365 environments.. It is a Security Operations solution designed to help security teams with Azure, Microsoft 365.