Desktop KQL query builder for Microsoft security and Azure services - 52 tables across Defender, Sentinel, Entra ID, Azure Monitor, App Insights, and more
☆47Jun 22, 2026Updated 3 months ago
Alternatives and similar repositories for KustoForge
Users that are interested in KustoForge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Neural network RDP cache reconstruction tool☆34May 21, 2026Updated 4 months ago
- A curated toolkit of M365 automation scripts designed to simplify management, accelerate workflows, and improve operational efficiency.☆61Sep 6, 2026Updated last month
- KQL Sentinel and Defender Detection and Hunting Queries.☆16Aug 17, 2026Updated last month
- Group centric documentation will provide you with information about your Intune assignments to groups.☆14Nov 9, 2023Updated 2 years ago
- Repository containing resources used for 365daysofADX.☆36Mar 4, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated last year
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆89Oct 2, 2026Updated last week
- Share Information about Microsoft Security Products☆152Updated this week
- Terraform Azure RM Compute Group Module☆10Sep 15, 2026Updated 3 weeks ago
- Generate Indexes from SANS PDFs☆20Jun 3, 2024Updated 2 years ago
- ☆17Aug 25, 2026Updated last month
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆48Jun 13, 2026Updated 3 months ago
- ☆51Updated this week
- ☆19Sep 17, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Volume Shadow Copy Explorer☆18Nov 23, 2025Updated 10 months ago
- Configure Azure Privileged Identity Management Via The API☆16Oct 28, 2022Updated 3 years ago
- A Liquid tag plugin for Jekyll that allows remote includes from external sources.☆17Jan 31, 2023Updated 3 years ago
- Hints for the Kusto Detective Agency - Season 2☆10Aug 15, 2023Updated 3 years ago
- Creates data for diagrams at https://www.diagrams.net/ based on Azure Managementgroups and Subscriptions☆13Feb 13, 2022Updated 4 years ago
- Content from my blog.☆39May 5, 2025Updated last year
- Scripts written in BASH, PowerShell, Python, and other languages.☆11Aug 5, 2023Updated 3 years ago
- Block abused TLDs in Tenant Allow BlockList☆18Sep 10, 2026Updated last month
- Azure Resource Graph example queries to build upon☆12Sep 20, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Welcome to the Just another Kusto hacker ("JAKH") contest!☆54Jun 6, 2025Updated last year
- Solutions for COMP9021 Principles of Programming from UNSW.☆14Nov 20, 2023Updated 2 years ago
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆798Updated this week
- This repository contains a group of scripts to simplify the process to migrate subscription from one tenant to another☆15Jul 30, 2020Updated 6 years ago
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆62Feb 18, 2026Updated 7 months ago
- A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri☆42Sep 27, 2024Updated 2 years ago
- MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testin…☆23Oct 8, 2025Updated last year
- Azure scripts, snippets and ARM/Bicep templates☆16Oct 1, 2025Updated last year
- Get Intune Assignments helps you to identify the Intune assignments target the Entra Id Groups, Devices or Users☆66Nov 5, 2025Updated 11 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Repository to host automation for Cloud Labs☆32Jul 10, 2026Updated 3 months ago
- Assorted public MSP scripts☆19Feb 9, 2025Updated last year
- Lookup Azure tenant information from a subscription ID.☆26May 22, 2026Updated 4 months ago
- Sharing my KQL queries for Azure Sentinel☆225Aug 4, 2026Updated 2 months ago
- Simplify AnyDesk log analysis by effortlessly searching, extracting, and generating reports on IP addresses and login dates.☆19May 31, 2024Updated 2 years ago
- KQL example queries for working in Azure☆39Dec 1, 2025Updated 10 months ago
- A collection of ARM-based detections for Azure/AzureAD based TTPs☆91Dec 12, 2023Updated 2 years ago