Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.
☆17Nov 9, 2026Updated this week
Alternatives and similar repositories for ContentOps
Users that are interested in ContentOps are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- Visualize Microsoft Defender XDR process trees and security events☆33Aug 24, 2025Updated last year
- SOCAutomators Substack blog companion — threat research, DBIR analysis, and security operations content☆21Oct 30, 2026Updated last week
- Zero Trust Conditional Access baseline for Microsoft Entra — structured policy families, exclusion groups, named locations, and PowerShel…☆15Oct 25, 2026Updated 2 weeks ago
- ☆18Sep 25, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Balanced Scorecard for Cyber Resilience☆13Nov 17, 2025Updated 11 months ago
- This powerbi dashboards will help the Security team to analyze KBs, delivered monthly by Microsoft☆14Mar 9, 2022Updated 4 years ago
- Discover how every _CL table gets its data into Microsoft Sentinel. Scans Logic Apps, Azure Functions, AMA agents, Arc machines, DCRs, an…☆12Mar 29, 2026Updated 7 months ago
- A fast, native desktop workbench for Azure Data Explorer☆14Updated this week
- Sentinel Recon Tools Workbook☆14Aug 24, 2022Updated 4 years ago
- Collection of scripts to automate the Malware Analysis process☆33Oct 27, 2025Updated last year
- Share Information about Microsoft Security Products☆155Nov 6, 2026Updated last week
- ☆46Apr 10, 2024Updated 2 years ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Metro-AI is a unified PowerShell module that streamlines management of Azure AI Agent and Assistant APIs.☆14Dec 12, 2025Updated 11 months ago
- Post-Exploitation EVTX Analyzer for BloodHound Mapping☆15May 8, 2026Updated 6 months ago
- Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audi…☆17Updated this week
- MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testin…☆23Oct 8, 2025Updated last year
- Local-LLM alert triage for self-hosted SOCs.☆15Updated this week
- Bounded-state streaming scanner for web, source, and file content pipelines☆10Jun 19, 2026Updated 4 months ago
- An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bice…☆82Updated this week
- An introduction to detection engineering☆14Jan 3, 2025Updated last year
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- brostash: Linux distribution based on Debian and focusing on network security events collection☆33Aug 30, 2020Updated 6 years ago
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆60Feb 18, 2026Updated 8 months ago
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Oct 30, 2026Updated last week
- This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their…☆29Nov 20, 2024Updated last year
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- A lab environment for learning about MSTICPy☆39Feb 3, 2023Updated 3 years ago
- ☆86Feb 4, 2026Updated 9 months ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆21May 20, 2025Updated last year
- The Solana Wallet Manager & Transaction Notifier is a TypeScript app for managing and tracking Solana blockchain transactions. It creates…☆11Jun 23, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…☆10Dec 22, 2023Updated 2 years ago
- Adversary tradecraft detection, protection, and hunting☆15May 8, 2026Updated 6 months ago
- Unlock FP/BF16 instruction issue rate on Nvidia 3000's cards to their professional equivalents☆17Oct 24, 2026Updated 2 weeks ago
- Scripts to help and speed up reversing activities☆14Jun 30, 2026Updated 4 months ago
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- My Azure Sentinel Ninja ideas, thoughts and contributions☆26Nov 3, 2026Updated last week
- various tools for Microsoft Sentinel☆32Jun 17, 2026Updated 4 months ago
Are these results useful?