Desktop KQL query builder for Microsoft security and Azure services - 52 tables across Defender, Sentinel, Entra ID, Azure Monitor, App Insights, and more
☆47Jun 22, 2026Updated 2 months ago
Alternatives and similar repositories for KustoForge
Users that are interested in KustoForge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The EAM Auto updater is a free community tool, designed to automatically publish new application versions available in the Enterprise App…☆16Jul 3, 2026Updated 2 months ago
- A curated toolkit of M365 automation scripts designed to simplify management, accelerate workflows, and improve operational efficiency.☆61Sep 6, 2026Updated 2 weeks ago
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year
- Threat Hunting queries of multiple platforms☆84Sep 9, 2026Updated last week
- KQL Sentinel and Defender Detection and Hunting Queries.☆16Aug 17, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Group centric documentation will provide you with information about your Intune assignments to groups.☆14Nov 9, 2023Updated 2 years ago
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 9 months ago
- Single-file desktop GUI for searching, browsing, and analyzing SQLite databases. Python + tkinter. No install required.☆25Apr 25, 2026Updated 4 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆158Apr 1, 2026Updated 5 months ago
- LTI 1.x sample applications. Require LtiLibrary1.6. No longer maintained.☆15Dec 18, 2017Updated 8 years ago
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated 11 months ago
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆89Updated this week
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆57Sep 6, 2026Updated 2 weeks ago
- Share Information about Microsoft Security Products☆149Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Generate Indexes from SANS PDFs☆19Jun 3, 2024Updated 2 years ago
- Scripts for Kali Linux☆17May 25, 2017Updated 9 years ago
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- ☆17Aug 25, 2026Updated 3 weeks ago
- Generate Azure Network Diagrams, using diagram-as-code (Graphviz)☆82Aug 17, 2026Updated last month
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆45Jun 13, 2026Updated 3 months ago
- ☆49Jul 15, 2026Updated 2 months ago
- ☆18Updated this week
- Volume Shadow Copy Explorer☆17Nov 23, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hints for the Kusto Detective Agency - Season 2☆10Aug 15, 2023Updated 3 years ago
- Creates data for diagrams at https://www.diagrams.net/ based on Azure Managementgroups and Subscriptions☆13Feb 13, 2022Updated 4 years ago
- Block abused TLDs in Tenant Allow BlockList☆16Sep 10, 2026Updated last week
- This Module makes it easier to Install/Uninstall programs on Windows, regardless of the method of installation (PSGet, Chocolatey CmdLine…☆19Nov 28, 2023Updated 2 years ago
- Azure Resource Graph example queries to build upon☆12Sep 20, 2019Updated 7 years ago
- Welcome to the Just another Kusto hacker ("JAKH") contest!☆54Jun 6, 2025Updated last year
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆798Jun 3, 2026Updated 3 months ago
- The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE S…☆16Apr 22, 2026Updated 4 months ago
- This repository contains a group of scripts to simplify the process to migrate subscription from one tenant to another☆15Jul 30, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri☆42Sep 27, 2024Updated last year
- MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testin…☆23Oct 8, 2025Updated 11 months ago
- Azure scripts, snippets and ARM/Bicep templates☆16Oct 1, 2025Updated 11 months ago
- Get Intune Assignments helps you to identify the Intune assignments target the Entra Id Groups, Devices or Users☆66Nov 5, 2025Updated 10 months ago
- Repository to host automation for Cloud Labs☆32Jul 10, 2026Updated 2 months ago
- Assorted public MSP scripts☆19Feb 9, 2025Updated last year
- Lookup Azure tenant information from a subscription ID.☆24May 22, 2026Updated 3 months ago