Go365
A tool for attacking O365 users
Spray a list of usernames and passwords against M365/Azure/whatever-they're-calling-it-this-week
Go365 -endpoint graph -up UP.txt -debug -w 300 -o CLIENT_output.txt -d domain.com
The UP.txt
would be a "users and passwords" file that you'd generate by some other means, such as a dehashed dump.