This code snippet retrieves Azure Sentinel rules that are mapped to MITRE ATT&CK Framework and generates the related MITRE D3FEND defenses
☆77Jun 28, 2021Updated 5 years ago
Alternatives and similar repositories for Sentinel2D3FEND
Users that are interested in Sentinel2D3FEND are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆12Jul 15, 2022Updated 4 years ago
- Ingesting Shodan Monitor Alerts to Microsoft Sentinel☆33Sep 19, 2023Updated 3 years ago
- Integration tools for TheHive and Azure Sentinel☆13Sep 23, 2020Updated 6 years ago
- ☆14Feb 22, 2021Updated 5 years ago
- A collection of assets I created to help improve security and governance operations for Azure environments☆10Apr 7, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- PowerShell commands to export the Azure Sentinel Rule Templates to a CSV and to create the Rules from selected entries in the CSV file☆17Oct 31, 2024Updated 2 years ago
- Azure Function for the Microsoft Sentinel Triage AssistanT (STAT)☆16Aug 21, 2026Updated 2 months ago
- putting all together: customer environment, some threats, azure security services, Microsoft 365 Defender services, Azure monitor service…☆18Apr 11, 2022Updated 4 years ago
- Sentinel Analytics Rule converter PowerShell module☆71Feb 24, 2026Updated 8 months ago
- Azure OpenAI Playbook created for Microsoft Sentinel☆14May 2, 2024Updated 2 years ago
- ☆17Jul 13, 2022Updated 4 years ago
- Workbooks for Azure Sentinel☆64Aug 14, 2023Updated 3 years ago
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆68Mar 30, 2026Updated 7 months ago
- Send High & New Incidents to The Hive incident management Platform☆18Feb 13, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Miscellaneous Azure Sentinel files that don't fall into other categories.☆13Aug 23, 2021Updated 5 years ago
- Data for BatchExplorer☆11Dec 9, 2023Updated 2 years ago
- ☆46Apr 10, 2024Updated 2 years ago
- ☆14Mar 5, 2021Updated 5 years ago
- ☆19Sep 13, 2021Updated 5 years ago
- This repository contains various public projects created by the owners of Hybrid Brothers☆21Nov 3, 2023Updated 2 years ago
- various tools for Microsoft Sentinel☆32Jun 17, 2026Updated 4 months ago
- High-level Threat Intelligence playbooks☆22Mar 6, 2021Updated 5 years ago
- Sentinel Recon Tools Workbook☆14Aug 24, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Collection of Azure Monitor or Sentinel Kusto Queries☆11Aug 17, 2022Updated 4 years ago
- ☆40Sep 29, 2021Updated 5 years ago
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 7 months ago
- Detection rules and threat hunting queries in Defender XDR and Azure Sentinel☆17Mar 13, 2026Updated 7 months ago
- GraphEssentials is a PowerShell module that helps with Office 365 / Azure AD using mostly Graph☆13Updated this week
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,080Nov 28, 2024Updated last year
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 3 years ago
- ✨ Kubernetes installation ways and usage methods☆15Sep 12, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆69Apr 1, 2026Updated 7 months ago
- ☆13Apr 23, 2021Updated 5 years ago
- Resources for SANS CTI Summit 2021 presentation☆104Nov 8, 2023Updated 2 years ago
- Microsoft Sentinel SOC Operations☆270Jul 24, 2026Updated 3 months ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆70Mar 17, 2024Updated 2 years ago
- ☆35May 30, 2023Updated 3 years ago