List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by developing custom TTP'S from red-teaming engagements & simulations with the strategic goal to prevent threats before they have the opportunity to execute
☆27Jun 30, 2021Updated 5 years ago
Alternatives and similar repositories for DefenderATP-Proactive-Threat-Hunting-Queries-KQL
Users that are interested in DefenderATP-Proactive-Threat-Hunting-Queries-KQL are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Semantic analysis with neural networks☆10Feb 18, 2021Updated 5 years ago
- Microsoft Defender ATP Advanced Hunting Queries☆10May 28, 2020Updated 6 years ago
- Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.☆132Feb 10, 2026Updated 8 months ago
- Threat Hunter's Knowledge Base☆24Dec 27, 2021Updated 4 years ago
- Sample queries for Advanced hunting in Microsoft Defender ATP☆39Dec 19, 2021Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Michael Melone's Kusto Query library☆20Nov 17, 2023Updated 2 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week
- Repository with Sample KQL Query examples for Threat Hunting☆218Sep 1, 2022Updated 4 years ago
- Collection of red team scripts, resources & configs.☆15Feb 14, 2026Updated 8 months ago
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆802Updated this week
- A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel☆244Feb 8, 2023Updated 3 years ago
- Windows Defender ATP - Advanced Hunting Queries☆22Apr 12, 2018Updated 8 years ago
- Advanced Hunting Queries for Microsoft Security Products☆108Jan 10, 2023Updated 3 years ago
- Cheat sheets for threat hunting, detection and other stuff.☆35Oct 7, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Repository with supporting materials for Invictus Academy/Training☆45Jul 22, 2026Updated 3 months ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 3 years ago
- A small, unfinished utility to browse and download NirSoft programs.☆18Jun 14, 2020Updated 6 years ago
- This repo is where I store my Threat Hunting ideas/content☆90Mar 20, 2026Updated 7 months ago
- A guide to using Azure Data Explorer and KQL for DFIR☆126May 16, 2022Updated 4 years ago
- Sharing my KQL queries for Azure Sentinel☆226Aug 4, 2026Updated 2 months ago
- A Python tool and library for decrypting MS Office files with passwords and other secrets☆10Jul 20, 2018Updated 8 years ago
- Collection of Jupyter Notebook for Threat Hunting and Blue Team Purposes☆22Jun 15, 2022Updated 4 years ago
- Python Script For Packet Sniffing☆11Aug 19, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Automating simple report creating of threat intelligence using ChatGPT and Greynoise API.☆10Oct 3, 2023Updated 3 years ago
- Sample queries for Advanced hunting in Windows Defender ATP☆12Apr 22, 2020Updated 6 years ago
- a simple powershell wrapper to automate checking a user's access around the network☆14Dec 5, 2023Updated 2 years ago
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Mar 14, 2023Updated 3 years ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Scan git repos for secrets using regex and entropy 🔑☆10Jun 18, 2020Updated 6 years ago
- ☆75Oct 21, 2024Updated 2 years ago
- Proof of Concept - Using squid url rewrite feature to "hijack" proxy traffic and inject BeEF payload into it.☆13Feb 23, 2015Updated 11 years ago
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Apr 13, 2018Updated 8 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Python code for 1) permuting randomly-generated passwords for easier entry on mobile devices, and 2) for estimating entropy lost as a res…☆16May 5, 2016Updated 10 years ago
- Clone site of frontend NFT market place using API☆10Jul 22, 2021Updated 5 years ago
- Collection of configuration files that can be used as good starting points to secure different services and tools☆18Oct 11, 2026Updated 3 weeks ago
- 🍚 Rice Frontend AMM Swap☆26Sep 21, 2021Updated 5 years ago
- Automated Phishing Tool☆11May 27, 2020Updated 6 years ago
- An opensource sigma conversion tool built using pysigma☆176Updated this week
- Azure playbook for automatic evidence collection☆13Jul 3, 2023Updated 3 years ago