O3-Cyber / azure-security-survival-kit
☆64Updated 7 months ago
Alternatives and similar repositories for azure-security-survival-kit:
Users that are interested in azure-security-survival-kit are comparing it to the libraries listed below
- ☆45Updated 2 weeks ago
- A collection of ARM-based detections for Azure/AzureAD based TTPs☆84Updated last year
- ThreatModel for Azure Storage - Library of all the attack scenarios on Azure Storage, and how to mitigate them following a risk-based app…☆57Updated last year
- Microsoft Entra ID App Audit Solution (AADAppAudit)☆83Updated 6 months ago
- Solution to deploy a Sentinel playground demo environment☆57Updated last year
- Azure administrative tiering based on known attack paths☆63Updated this week
- All slides from my meetup talks☆34Updated last week
- ☆23Updated last month
- Check you Sentinel environment using Pester infrastructure tests☆29Updated last year
- Repository with supporting materials for Invictus Academy/Training☆42Updated 2 months ago
- Welcome to the Cloud Security Toolkit repository, your all-in-one destination for cutting-edge cloud security resources! Whether you're d…☆20Updated last week
- A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri☆27Updated 5 months ago
- Rapid Azure Diagnostic deployments☆25Updated last year
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆67Updated 10 months ago
- Sharing my KQL queries for Azure Sentinel☆162Updated this week
- Tool for creating reports on Entra ID Role Assignments☆91Updated 11 months ago
- Rapidly apply hundreds of security controls in Azure☆184Updated last year
- Collection of Microsoft Identity Threat Detection and Response resources.☆40Updated 2 weeks ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆91Updated last year
- MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore☆66Updated 2 years ago
- ☆65Updated 3 years ago
- Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.☆149Updated last week
- Azure Activity Log Axe is a continually developing tool that simplifies the transactional log format provided by Microsoft. The tool leve…☆27Updated 6 months ago
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆58Updated last year
- Repository with Sentinel Analytics Rules, Hunting Queries and helpful external data sources.☆103Updated this week
- Extensible Azure Security Tool - Documentation☆81Updated last year
- Assess Azure Security State☆36Updated last year
- KQL example queries for working in Azure☆32Updated 7 months ago