Greyline Intelligence is an independent threat intelligence and investigative publication focused on Microsoft 365 and identity-based attacks. We track real world attacker tradecraft across Microsoft 365, Entra ID, OAuth abuse, AiTM phishing, session hijacking, and modern cloud intrusion patterns — and translate it into clear, actionable takeaways for security teams. Built