Petra Security

Our research on Microsoft 365 attacker behavior.

Deep dives on how to detect Microsoft account compromises, from the team at Petra Security.

Stop Attacks Before Damage

Automated toolkits inflict damage within minutes of access. The challenge has shifted from simply catching attacks to stopping them before damage is inflicted.

Ed Torgas · Jul 13, 2026

Device Code Phishing, Part 2: What Attackers Do After They Get In

Ed Torgas · Jun 18, 2026

Device Code Phishing, Part 1: How the Attackers Get In

Adithya Vellal · Apr 30, 2026
All Research

See what's in your last six months of logs.

Get insurance-grade forensics on the last 6 months of your M365 logs. Setup takes 5 minutes with results in 48 hours.

See a demo