mindflayer
Hive Mind
Actively exploited

  • Recently added vulnerabilities that are being exploited in the wild, from CISA's Known Exploited Vulnerabilities catalog.

Source: CISA KEV catalog (opens in new tab). EPSS: estimated chance of exploitation in the next 30 days, from FIRST.org (opens in new tab). Information only, not advice for your environment. Talk to us if you're affected.

Provider incidents

From each provider's public status page, checked every 3 hours. Microsoft 365 shows the public consumer feed; business tenants should check their admin center.

Join the Hive Mind

The full daily brief by email: 5 to 10 exploited vulnerabilities, outages and headlines, in one short read.

What you get, and Pro →
Menu
Free tool · Microsoft Entra ID account check

IdentityMapLite

Find the accounts an attacker would go for first: admins without MFA, people who left but can still sign in, and guest invites nobody accepted. Add two exports from the Entra admin center and get a fix list.

Runs entirely in your browser. Your files are never uploaded.

Step 1

Add your Entra exports

Either export works on its own. Both together give the full picture.

Drop CSV files here or choose them from your computer.

How to get the exports (about two minutes)
  1. MFA registration: in the Microsoft Entra admin center, go to Protection › Authentication methods › User registration details and choose Download. This finds admins and users without MFA, and users who only have SMS or a phone call.
  2. Users: go to Users › All users and choose Download users. This finds guest invites that were never accepted and accounts that are disabled.
  3. Sign-in dates (optional): the standard user download has no sign-in dates. If you have an export that does (a PowerShell or Graph report with a last sign-in column), add it too and IdentityMap Lite will find stale accounts.

The full version · free 30-day pilot

Registered for MFA isn't the same as required to use it

IdentityMap Lite reads a snapshot. The full IdentityMap connects to your own Entra tenant read-only, checks your Conditional Access policies account by account, and gives your team a ranked fix list every week.

  1. See itThe demo version, filled with made-up data
  2. Book a 20-minute callYour environment, and what you'd want fixed first
  3. Free 30-day pilotRuns on your own PC with read-only access: account data never leaves your network

Book a call See the demo (sample data)

  • Conditional Access check: is MFA actually enforced for each account
  • Admin role review, including standing Global Administrators
  • Shared and service accounts judged by their own rules
  • Live, read-only connection: no exports
  • Accepted exceptions with expiry dates
  • Change over time: what's new and what got fixed

IdentityMap Lite by Mindflayer. Free to use. Accounts are matched across files by sign-in name. Your files, account names and sign-in names never leave your browser, and nothing is kept after you close the tab. To see how the tool is used, the page sends Mindflayer anonymous counts only (how many files and accounts you checked, the MFA registration percentage and how many accounts each check found). Information only, not advice for your environment.