Hawk Logo

Cloud Forensics with Hawk

Hunt and Respond to Microsoft Cloud Threats with Open-Source Precision

Install from PS Gallery View on GitHub

What Hawk Can Do

Data Collection

Efficiently gather forensic data from Microsoft cloud environments with automated collection processes.

Security Analysis

Analyze security configurations, audit logs, and user activities across your Microsoft cloud environment.

Export & Report

Generate both easy-to-read CSV reports and structured JSON data for advanced analysis and SIEM integration.

Getting Started

Installation

Install-Module -Name Hawk

Hawk is available through the PowerShell Gallery. Simply open a PowerShell terminal and run the command above to get started.

Key Features

  • Tenant and User based investigations
  • Automated Microsoft cloud log collection
  • Comprehensive audit logging
  • Provides actionable insights
Watch the Tutorials

User Guide

Tenant-Based Commands

Commands that start with Verb-HawkTenant analyze tenant-wide settings:

  • Tenant configuration settings
  • Administrator role assignments
  • Application permissions and consent grants
  • User enumeration and access patterns
  • Microsoft 365 admin activities

User-Based Commands

Commands that start with Verb-HawkUser focus on individual user investigation:

  • Authentication history
  • Mailbox configuration
  • Inbox rules
  • Email item access history
  • Mobile device access history
Full User Guide

Contribute

Everyone is welcome to contribute to this tool. The goal of the Hawk tool is to be a community lead tool and provides security support professionals with the tools they need to quickly and easily gather data from the Microsoft cloud. Whether its maintaining this web page, submitting feature requests / bug fixes, or laying down some PowerShell code, we welcome you all!


Start Coding!

Select an open issue and start contributing today! For questions on the project, contact the Hawk dev team via the GitHub questions form.

Ask Question
Request a Feature

Have ideas for improvement? Submit a feature request and we will get right on it!


Request Feature
Submit a Bug Fix

Spotted a bug? Let us know so we can patch up Hawk!


Submit Bug