EVILMIST

Summary from the TLDR InfoSec newsletter

EvilMist's Enumerate-EntraUsers is an Azure Entra ID reconnaissance tool featuring 15+ user enumeration methods designed to work even when direct /users API access is blocked. It assesses MFA gaps, conditional access policy weaknesses, and privilege escalation paths with BloodHound-compatible export. Available in PowerShell and Python with stealth mode (configurable delays/jitter) for detection evasion.