MicroBurst
git clone git@github.com:NetSPI/MicroBurst.git
cd MicroBurst
pwsh-preview
# Authenticate
Connect-AzAccount
# Import MicroBurst
ipmo ./MicroBurst.psm1
# Install module for Out-GridView
Install-Module Microsoft.PowerShell.GraphicalTools
# Show commands
Get-Command -Module MicroBurst
# Dump info from an Azure subscription
**Note:** Be sure to click a row in the pop up before clicking **Export**
Get-AzDomainInfo -folder MicroBurst -Verbose
# Look for creds or certificate stores in a number of places and dump them to `secrets.txt`
**Note:** Be sure to click a row in the pop up before clicking **Export**
Get-AzPasswords -Verbose | Out-File -FilePath ./secrets.txt
# Dump Key Vault Keys and Secrets from an Azure subscription
# via Automation Accounts specifically
**Note:** Be sure to click a row in the pop up before clicking **Export**
Get-AzKeyVaultsAutomation -Verbose
Resources:
Where I found out about the tool initially
Write output to a file