Desktop KQL query builder for Microsoft security and Azure services - 52 tables across Defender, Sentinel, Entra ID, Azure Monitor, App Insights, and more
☆46Jun 22, 2026Updated 2 months ago
Alternatives and similar repositories for KustoForge
Users that are interested in KustoForge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The EAM Auto updater is a free community tool, designed to automatically publish new application versions available in the Enterprise App…☆16Jul 3, 2026Updated last month
- Neural network RDP cache reconstruction tool☆34May 21, 2026Updated 3 months ago
- A curated toolkit of M365 automation scripts designed to simplify management, accelerate workflows, and improve operational efficiency.☆52Jul 22, 2026Updated last month
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year
- Threat Hunting queries of multiple platforms☆83Aug 13, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- KQL Sentinel and Defender Detection and Hunting Queries.☆16Aug 17, 2026Updated last week
- Repository containing resources used for 365daysofADX.☆36Mar 4, 2026Updated 5 months ago
- Single-file desktop GUI for searching, browsing, and analyzing SQLite databases. Python + tkinter. No install required.☆24Apr 25, 2026Updated 4 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆158Apr 1, 2026Updated 4 months ago
- LTI 1.x sample applications. Require LtiLibrary1.6. No longer maintained.☆15Dec 18, 2017Updated 8 years ago
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆86Updated this week
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆56Aug 24, 2026Updated last week
- Share Information about Microsoft Security Products☆135Updated this week
- Terraform Azure RM Compute Group Module☆10May 28, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Generate Indexes from SANS PDFs☆18Jun 3, 2024Updated 2 years ago
- Scripts for Kali Linux☆17May 25, 2017Updated 9 years ago
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- ☆17Updated this week
- Canari Threat Recon package for Maltego☆16Oct 25, 2014Updated 11 years ago
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆43Jun 13, 2026Updated 2 months ago
- ☆49Jul 15, 2026Updated last month
- Volume Shadow Copy Explorer☆15Nov 23, 2025Updated 9 months ago
- Automated Phishing Tool☆11May 27, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Liquid tag plugin for Jekyll that allows remote includes from external sources.☆17Jan 31, 2023Updated 3 years ago
- Hints for the Kusto Detective Agency - Season 2☆10Aug 15, 2023Updated 3 years ago
- Creates data for diagrams at https://www.diagrams.net/ based on Azure Managementgroups and Subscriptions☆13Feb 13, 2022Updated 4 years ago
- ARM template visualizer☆12Apr 6, 2018Updated 8 years ago
- Content from my blog.☆39May 5, 2025Updated last year
- Block abused TLDs in Tenant Allow BlockList☆15Aug 9, 2026Updated 3 weeks ago
- Scripts written in BASH, PowerShell, Python, and other languages.☆11Aug 5, 2023Updated 3 years ago
- Welcome to the Just another Kusto hacker ("JAKH") contest!☆54Jun 6, 2025Updated last year
- Solutions for COMP9021 Principles of Programming from UNSW.☆15Nov 20, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆794Jun 3, 2026Updated 2 months ago
- This repository contains a group of scripts to simplify the process to migrate subscription from one tenant to another☆15Jul 30, 2020Updated 6 years ago
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆61Feb 18, 2026Updated 6 months ago
- MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testin…☆23Oct 8, 2025Updated 10 months ago
- Azure scripts, snippets and ARM/Bicep templates☆16Oct 1, 2025Updated 10 months ago
- Get Intune Assignments helps you to identify the Intune assignments target the Entra Id Groups, Devices or Users☆67Nov 5, 2025Updated 9 months ago
- example workbook for Azure cost Management☆16Nov 17, 2021Updated 4 years ago