cisagov/untitledgoosetool

untitledgoosetool

✅ Recently maintained

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

967Stars
93Forks
+17-day stars

Python · CC0-1.0 · Last push 2026-10-13

Official repository & installation ↗

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-05964
2026-10-06964
2026-10-07964
2026-10-08964
2026-10-09964
2026-10-10964
2026-10-11964
2026-10-12964
2026-10-13965
2026-10-14965
2026-10-15965
2026-10-16965
2026-10-17965
2026-10-18965
2026-10-19965
2026-10-20965
2026-10-21965
2026-10-22966
2026-10-23966
2026-10-24966
2026-10-25966
2026-10-26966
2026-10-27966
2026-10-28966
2026-10-29966
2026-10-30967
2026-10-31967
2026-11-01967
2026-11-02967
2026-11-03967

Get the project

git clone https://github.com/cisagov/untitledgoosetool.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.