If you discover a security vulnerability, please do not open a public GitHub issue. Instead, email security details to alibidhendi2000@gmail.com with:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if you have one)

Never commit the following to this repository:

• Real API keys, tokens, or authentication credentials
• Passwords or SSH keys
• Real user account data or export files
• Real authentication logs containing usernames or IP addresses
• Private identity information, PII, or personal contact details
• Azure/Entra ID connection strings or secrets

This toolkit processes potentially sensitive audit and log data. Users are responsible for:

• Securing CSV exports and auth logs before analysis
• Restricting report output to authorized personnel
• Following your organization's data retention and disposal policies
• Ensuring compliance with GDPR, HIPAA, or other regulations applicable to your data

• Always run this tool on secure, internal systems
• Do not transmit reports over insecure channels
• Restrict file permissions on output reports (chmod 600 report.json)
• Delete sensitive data from logs and CSVs when no longer needed
• Use only in authorized security audits and operations

Tests use realistic but fabricated data:

• Usernames like jdoe, bgates
• Domains like corp.example
• IP addresses like 192.168.1.1, 10.0.0.1
• Timestamps without real events

Test data does not represent actual users or systems.