CrowdStrike / Cloud-Azure
Discover for Cloud and Containers Azure
☆28Updated 2 months ago
Alternatives and similar repositories for Cloud-Azure:
Users that are interested in Cloud-Azure are comparing it to the libraries listed below
- A collection of ARM-based detections for Azure/AzureAD based TTPs☆82Updated last year
- Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor☆159Updated this week
- CrowdStrike's Open Source Policy & Contribution Guide☆39Updated last year
- Various tools used to monitor and troubleshoot Azure Sentinel data☆30Updated 3 months ago
- ☆30Updated 2 months ago
- Templates for Cribl Stream Collectors☆32Updated last week
- Workbooks for Azure Sentinel☆57Updated last year
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆39Updated 4 years ago
- A collection of scripts and works related to Azure Sentinel☆42Updated 2 years ago
- Sharing my KQL queries for Azure Sentinel☆147Updated this week
- M365 MDATP Live Response sample scripts☆65Updated 2 months ago
- Unleash the power of the Falcon Platform at the CLI☆114Updated this week
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆39Updated last week
- Cloud deployment size calculation utilities☆17Updated last week
- A collection of Microsoft Sentinel workbooks and analytics rules.☆104Updated 11 months ago
- MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore☆66Updated 2 years ago
- KQL queries for cyber defense and for solving daily issues☆46Updated this week
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆52Updated last year
- Advanced Hunting Queries for Microsoft Security Products☆106Updated 2 years ago
- In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (…☆107Updated this week
- Microsoft Defender Advanced Threat Protection☆43Updated 3 months ago
- ☆72Updated 3 months ago
- Security-Focused O365 Management and Log Scripts☆60Updated 2 years ago
- Misc. content for Microsoft Sentinel☆18Updated 9 months ago
- ☆54Updated 6 months ago
- Sample queries for Advanced hunting in Microsoft Defender ATP☆37Updated 3 years ago
- Cloud-native SIEM for intelligent security analytics for your entire enterprise.☆20Updated 3 years ago
- Website for ASD's Blueprint for Secure Cloud☆70Updated 2 weeks ago
- ☆44Updated this week
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆154Updated last month