Sophos-Community / XDR_Queries
This hosts all queries created on the LD&R Forum
☆11Updated last year
Alternatives and similar repositories for XDR_Queries:
Users that are interested in XDR_Queries are comparing it to the libraries listed below
- Sophos Central PowerShell module☆10Updated last year
- ☆27Updated 4 months ago
- ☆18Updated 7 months ago
- Automation around Entra ID☆33Updated last month
- Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.☆40Updated 3 years ago
- System Tray Tool for WDAC☆30Updated 3 weeks ago
- PowerShell module for SentinelOne API☆65Updated last year
- Defender for Endpoint☆27Updated 6 months ago
- PowerShell module for SentinelOne API☆27Updated 3 years ago
- ☆44Updated this week
- ☆50Updated this week
- Root module for creating Tier Model / Delegation Model on Active Directory☆16Updated this week
- ☆25Updated last month
- ☆16Updated 2 months ago
- Maintain Tier 0 users. This script take care all Tier 0 users are in the correct OU or in the default user container and add the Kerberos…☆55Updated 2 months ago
- MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore☆66Updated 2 years ago
- Sentinel Threat Intelligence Upload Toolkit☆11Updated 6 months ago
- ClientInspectorV2 - Unleashing the power of Azure LogAnalytics, Azure Data Collection Rules, Log Ingestion API by doing client inventory …☆24Updated last year
- ☆48Updated 6 months ago
- PowerShell Module for managing Microsoft Defender Advanced Threat Protection☆69Updated 2 years ago
- ☆41Updated last year
- Powershell script for Windows to retrieve the authentication hardening status of DCOM applications☆20Updated 2 years ago
- Microsoft Active Directory (AD) Awesome List☆19Updated this week
- Perform general security checks against AD environment☆64Updated 2 years ago
- ☆16Updated last year
- M365 MDATP Live Response sample scripts☆65Updated 2 months ago
- A WDAC configuration repository with the sole intention of enriching MDE☆28Updated last year
- Sysmon configuration file templates with advanced event tracing and blocking☆37Updated this week
- The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…☆41Updated last year
- ☆59Updated 11 months ago