Alternatives and similar repositories for MDATP

Users that are interested in MDATP are comparing it to the libraries listed below

• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆66Updated 2 years ago
• ugurkocde / KQL_Intune
  ☆82Updated last year
• Cyberlorians / Articles
  ☆51Updated last week
• mattnovitsch / M365
  ☆55Updated 2 weeks ago
• ThomasVrhydn / MDE-troubleshooter
  This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …
  ☆55Updated this week
• msdirtbag / MDEAutomator
  PowerShell-based Automation of Defender for Endpoint
  ☆65Updated this week
• dougsbaker / CA-Export
  ☆37Updated 2 weeks ago
• rod-trent / SentinelWorkbooks
  Workbooks for Azure Sentinel
  ☆58Updated last year
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆69Updated 6 months ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆104Updated 3 weeks ago
• DevClate / 365AutomatedLab
  This module will create a Microsoft 365 Test Environment
  ☆102Updated 2 months ago
• dmrellan / Visual-Auditing-Security-Workbook-with-Microsoft-Sentinel
  ☆33Updated last month
• ManagedSentinel / AzureSentinelKQLScripts
  Various tools used to monitor and troubleshoot Azure Sentinel data
  ☆30Updated 6 months ago
• Kaidja / Microsoft-Sentinel
  Microsoft Sentinel related content
  ☆37Updated 3 months ago
• msgraph / powershell
  Share your own Graph PowerShell samples in the Discussions tab.
  ☆80Updated last year
• chadmcox / Azure_Active_Directory
  Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics
  ☆68Updated this week
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆105Updated last year
• alexverboon / PSMDATP
  PowerShell Module for managing Microsoft Defender Advanced Threat Protection
  ☆71Updated 2 years ago
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆154Updated last month
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆27Updated 10 months ago
• microsoft / AzureADToolkit
  PowerShell module to manage Azure Active Directory app credentials.
  ☆116Updated last year
• thalpius / Microsoft-Defender-for-Identity-Configuration-Checker
  ☆44Updated 2 years ago
• ugurkocde / IntuneDeviceQuery
  This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.
  ☆101Updated 2 months ago
• rod-trent / SentinelPS
  ☆30Updated 6 months ago
• sreedharande / Microsoft-Sentinel-As-A-Code
  Export Microsoft Sentinel artifacts like Analytical Rules, Hunting Queries, Workbooks in order to support new feature Repositories CI/CD …
  ☆58Updated 2 years ago
• rod-trent / SentinelPlaybooks
  ☆55Updated 9 months ago
• rod-trent / KQL-for-Everything
  KQL example queries for working in Azure
  ☆32Updated 9 months ago
• f-bader / SentinelARConverter
  Sentinel Analytics Rule converter PowerShell module
  ☆61Updated 3 months ago
• michaelmsonne / ManagedIdentityPermissionManager
  Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permiss…
  ☆67Updated last month
• EEN421 / KQL-Queries
  Ian Hanley's deceptively simple KQL queries.
  ☆49Updated this week