Alternatives and similar repositories for ATADocs:

Users that are interested in ATADocs are comparing it to the libraries listed below

• microsoft / MCAS
  Powershell module for Microsoft Cloud App Security
  ☆84Updated last year
• jangeisbauer / AdvancedHunting
  Advanced Hunting Queries for Microsoft Security Products
  ☆106Updated 2 years ago
• mattifestation / WDACPolicies
  A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies
  ☆62Updated last year
• alexverboon / PSMDATP
  PowerShell Module for managing Microsoft Defender Advanced Threat Protection
  ☆71Updated 2 years ago
• anthonws / MDATP_PoSh_Scripts
  ☆48Updated 10 months ago
• alexverboon / WindowsDefenderATP-Hunting-Queries
  Sample queries for Advanced hunting in Microsoft Defender ATP
  ☆37Updated 3 years ago
• microsoft / microsoft-defender-for-endpoint-manageability
  Microsoft Defender ATP Manageability and Maintenance scripts
  ☆27Updated last year
• microsoft / MTP-AHQ
  DEPRECATED -> GO TO https://github.com/microsoft/Microsoft-threat-protection-Hunting-Queries
  ☆20Updated 5 years ago
• microsoft / Azure-Advanced-Threat-Protection
  Additional Resources to improve Customer Experience with Azure Advanced Threat Protection
  ☆21Updated last year
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆69Updated 6 months ago
• reprise99 / Azure-Sentinel
  Cloud-native SIEM for intelligent security analytics for your entire enterprise.
  ☆20Updated 3 years ago
• microsoft / AzureADToolkit
  PowerShell module to manage Azure Active Directory app credentials.
  ☆116Updated last year
• microsoft / DefendTheFlag
  Get started fast with a built out lab, built from scratch via Azure Resource Manager (ARM) and Desired State Configuration (DSC), to test…
  ☆236Updated 4 years ago
• javiersoriano / sentinel-training
  ☆38Updated 3 years ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆103Updated 3 weeks ago
• SecureHats / Sentinel-playground
  Solution to deploy a Sentinel playground demo environment
  ☆57Updated last year
• azsec / azure-sentinel-tools
  A collection of scripts and works related to Azure Sentinel
  ☆42Updated 2 years ago
• davidprowe / AD_Sec_Tools
  ☆113Updated 5 years ago
• wortell / KQL
  KQL queries for Advanced Hunting
  ☆172Updated 5 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆36Updated 5 months ago
• Cyb3rWard0g / azure-loganalytics-api-clients
  A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…
  ☆23Updated last year
• gmellini / Microsoft-Defender-Security-Center-Hunting-Queries
  Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…
  ☆39Updated 4 years ago
• rucam / defender-comparison
  ☆59Updated last year
• EvotecIT / PowerShellManager
  Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.
  ☆40Updated 4 years ago
• rod-trent / SentinelPS
  ☆30Updated 5 months ago
• thalpius / Microsoft-Defender-for-Identity-Configuration-Checker
  ☆44Updated 2 years ago
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆44Updated 6 months ago
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆27Updated 9 months ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• merill / microsoft-info
  Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily
  ☆130Updated last week