mfasweeper checking MFA with mfasweeper Invoke-MFASweep -Username targetuser@targetdomain.com -Password Winter2020 -Recon -IncludeADFS related information https://www.blackhillsinfosec.com/exploiting-mfa-inconsistencies-on-microsoft-services/