Alternatives and similar repositories for EntraID

Users that are interested in EntraID are comparing it to the libraries listed below

• Corissalea / KQL-and-Workbooks
  Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!
  ☆21Updated last year
• JeffMichelmore / MDEKit
  ☆42Updated 2 years ago
• f-bader / EntraIDAuditLogToMicrosoftGraph
  A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri
  ☆36Updated last year
• Kaidja / Microsoft-Sentinel
  Microsoft Sentinel related content
  ☆38Updated last year
• securesloth / noCAP
  Lightweight security tool for auditing your organization's Conditional Access Policies (CAPs) in Microsoft Entra ID for potential misconf…
  ☆78Updated 11 months ago
• soteria-security / ADInspect
  A PowerShell script that automates the security assessment of Microsoft Active Directory environments.
  ☆68Updated 3 years ago
• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆30Updated 7 months ago
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆28Updated last year
• Fortigi / ServerHardening_DSC
  CIS & Azure Security Center Hardening recommendations implemented in PowerShell DSC from Azure Automation
  ☆34Updated 4 years ago
• Trimarc / Invoke-TrimarcADChecks
  The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…
  ☆60Updated 2 years ago
• O3-Cyber / AzureADRoleMonitor
  ☆50Updated 2 months ago
• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆65Updated 3 years ago
• TheCloudScout / m365defender-adx
  ☆22Updated 2 years ago
• jangeisbauer / AdvancedHunting
  Advanced Hunting Queries for Microsoft Security Products
  ☆108Updated 3 years ago
• anthonws / MDATP_PoSh_Scripts
  ☆50Updated last year
• microsoft / MSEntraIDProtectionGuidance
  MS Entra ID Protection Guidance
  ☆22Updated last year
• ugurkocde / KQL-Search
  ☆31Updated 2 years ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆96Updated 2 years ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆82Updated last year
• HybridBrothers / Hunting-Queries-Detection-Rules
  The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect…
  ☆67Updated this week
• alexverboon / DefenderResourceHub
  Defender Resource Hub
  ☆30Updated 3 weeks ago
• MSCloudInternals / XDRInternals
  A PowerShell module for the Defender XDR portal
  ☆62Updated this week
• mon-csirt / active-directory-security
  The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…
  ☆136Updated last year
• eshlomo1 / Azure-AD-Incident-Response
  Azure AD Incident Response
  ☆27Updated 4 years ago
• thalpius / Microsoft-Defender-for-Identity-Configuration-Checker
  ☆44Updated 2 years ago
• jsa2 / AADAppAudit
  Microsoft Entra ID App Audit Solution (AADAppAudit)
  ☆84Updated last year
• secgroundzero / KQL_Reference_Manual
  ☆43Updated 4 years ago
• reprise99 / 4688-sysmon
  ☆61Updated 2 years ago
• thalpius / Microsoft-Defender-for-Identity-Log-Analyzer
  ☆19Updated last year
• dwmetz / QuickPcap
  A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.
  ☆39Updated 3 years ago