Ltango / SentinelOne-APILinks
Some Python SentinelOne API request examples and UI
☆15Updated 7 years ago
Alternatives and similar repositories for SentinelOne-API
Users that are interested in SentinelOne-API are comparing it to the libraries listed below
Sorting:
- Logmira by Blumira has been created by Amanda Berlin as a helpful download of Microsoft Windows Domain Group Policy Object settings.☆62Updated last year
- Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…☆226Updated 8 months ago
- ☆87Updated 7 months ago
- Sysmon configuration file templates with advanced event tracing and blocking☆40Updated 2 months ago
- A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.☆288Updated 4 years ago
- The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…☆264Updated 4 years ago
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆264Updated 3 years ago
- Real-time Response scripts and schema☆119Updated last week
- Collect / retrieve Office365, AzureAD and DLP audit logs and output to PRTG, Azure Log Analytics Workspace, SQL, Graylog, Fluentd, and/or…☆113Updated last year
- Web based S1 query navigator for one-click threat hunting☆24Updated 4 years ago
- Implementing the CIS Critical Controls (almost) for Free☆86Updated 3 years ago
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆41Updated 5 years ago
- PowerShell module for Office 365 and Azure log collection☆275Updated last month
- EventList☆377Updated 4 years ago
- M365 MDATP Live Response sample scripts☆79Updated last year
- Sentinel Threat Intelligence Upload Toolkit☆17Updated last year
- Repository of SentinelOne Deep Visibility queries.☆134Updated 4 years ago
- Various tools used to monitor and troubleshoot Azure Sentinel data☆30Updated last year
- Building environments to replicate small networks and deploy applications☆327Updated 9 months ago
- Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI☆201Updated 7 years ago
- PowerShell module for SentinelOne API☆69Updated 2 years ago
- LogRhythm PowerShell Toolkit☆51Updated 2 months ago
- Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK☆42Updated this week
- Security-Focused O365 Management and Log Scripts☆62Updated 3 years ago
- Reworked assets for Azure Sentinel using Cisco Umbrella logs as source. Includes logstash config for Cisco Umbrella using Cisco managed A…☆13Updated 5 years ago
- ☆73Updated last year
- Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers☆263Updated last year
- Programming Microsoft Sentinel book☆25Updated last year
- A guide to using Azure Data Explorer and KQL for DFIR☆116Updated 3 years ago
- MISP to Sentinel integration☆75Updated this week