Manage and maintain Defender XDR custom collection configuration
☆40Nov 19, 2025Updated 11 months ago
Alternatives and similar repositories for TelemetryCollectionManager
Users that are interested in TelemetryCollectionManager are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft Sentinel SIEM Log Source Analyzer☆31Updated this week
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated last month
- Utility tool to ingest CSV files into Kusto☆21Dec 17, 2025Updated 10 months ago
- ☆12Oct 24, 2022Updated 4 years ago
- ☆86Feb 4, 2026Updated 8 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- ADAttributeHound is an OpenGraph extension for BloodHound that exports Active Directory custom attributes as node properties.☆24Jun 18, 2026Updated 4 months ago
- ☆25Oct 1, 2026Updated 3 weeks ago
- ☆72Apr 20, 2026Updated 6 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆160Apr 1, 2026Updated 6 months ago
- Interactive map of OAuth, Conditional Access, Entra Agent ID and MCP authentication flows, step by step☆61Oct 2, 2026Updated 3 weeks ago
- A WDAC configuration repository with the sole intention of enriching MDE☆30Jun 18, 2025Updated last year
- Short Python script for parsing Defender VDM signature files.☆10Sep 22, 2024Updated 2 years ago
- Velociraptor Server hosted in Azure App Service☆59Jun 4, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- This repo contains all the Microsoft Sentinel content build by EightFence for the Community☆14Updated this week
- Azure administrative tiering based on known attack paths☆164Updated this week
- Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)☆336Updated this week
- A threat hunting process☆146Oct 2, 2026Updated 3 weeks ago
- ☆445Oct 22, 2026Updated last week
- ☆28Jan 8, 2025Updated last year
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆170Mar 20, 2026Updated 7 months ago
- Overview of MS Defender☆166Feb 20, 2026Updated 8 months ago
- Discover gaps in Entra Conditional Access policies before attackers do☆139Jun 8, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆68Mar 30, 2026Updated 6 months ago
- Understanding the operation and limitations of Sysmon's events☆25Sep 15, 2022Updated 4 years ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆121Oct 22, 2026Updated last week
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated 5 months ago
- Guidance scripts related to Defender For Identity: Prereqs, configuration etc☆20Apr 17, 2026Updated 6 months ago
- A agentic Intel to hunt pipeline. Get hunting faster☆15Oct 19, 2026Updated last week
- Collection of Microsoft Identity Threat Detection and Response resources.☆58Oct 20, 2026Updated last week
- Deception implementation through analysis of BloodHound data☆61Sep 25, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- KQL Queries. Microsoft Defender, Microsoft Sentinel☆932Oct 21, 2026Updated last week
- This project contains a **test executable** specifically designed to trigger incidents in **Microsoft Defender for Endpoint (MDE)**. It…☆14Jul 20, 2025Updated last year
- ☆65Jul 5, 2026Updated 3 months ago
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆154Apr 9, 2026Updated 6 months ago
- KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunt…☆1,764Oct 13, 2026Updated 2 weeks ago
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- ☆31Oct 21, 2026Updated last week