NOCTURNE SYSTEMS // PROJECT ARCHIVE
A collection of hands-on identity and access management, Microsoft 365 administration, technical investigations, and security exercises. Each project documents its methodology, evidence, findings, and lessons learned.
APPLICATION SECURITY
Built a Microsoft Entra ID application registration, implemented OAuth authentication using Python MSAL, and investigated Microsoft Graph authorization through delegated permissions and JWT analysis.
IDENTITY GOVERNANCE
Performed a simulated access certification, reviewed security group entitlements, introduced controlled excessive membership, and verified remediation through Microsoft Entra audit records.
IDENTITY SECURITY
Investigated controlled password failures, evaluated a report-only Conditional Access MFA policy, and practiced lab account containment, session revocation, and access restoration.
MICROSOFT 365 ADMINISTRATION
Configured shared mailbox delegation, investigated Outlook access-denied errors, verified Send As permissions, examined message tracing, and developed a PowerShell script to audit mailbox permissions and export CSV reports.
All projects were completed in a controlled lab environment. Simulated incidents and policy evaluations are identified as such. Sensitive identity information has been excluded.