☆22Aug 29, 2023Updated 2 years ago
Alternatives and similar repositories for m365defender-adx
Users that are interested in m365defender-adx are comparing it to the libraries listed below
Sorting:
- Azure AiTM Function PoC to phish Entra ID Credentials☆28Nov 21, 2025Updated 3 months ago
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆39Oct 30, 2024Updated last year
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆29Aug 4, 2025Updated 7 months ago
- ☆43Oct 11, 2023Updated 2 years ago
- Detection rules and threat hunting queries in Defender XDR and Azure Sentinel☆16Feb 11, 2026Updated 3 weeks ago
- Generate test data that is not only realistic but also contextually meaningful☆27Jun 30, 2023Updated 2 years ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆19May 20, 2025Updated 9 months ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆13Jan 24, 2026Updated last month
- This Module Helps to Scan a Commit History of a Repo for Leakage of Secrets☆15Apr 26, 2025Updated 10 months ago
- Tool to enumerate unregistered reply URLs for single and multitenant apps in Azure☆15Jan 23, 2025Updated last year
- ResearchDev - XDR & SIEM Detection☆67Apr 16, 2025Updated 10 months ago
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated last year
- Powershell scripts meant to assist administrators of Exchange Online☆16Jan 15, 2026Updated last month
- KQL for Azure Resource Manager and AppID search☆23Aug 15, 2024Updated last year
- Repository to publish sample use cases, templates, solutions, automations for Microsoft Defender Threat Intelligence (MDTI) product☆80Sep 9, 2024Updated last year
- PowerShell module to help getting tokens using managed identities☆17Dec 29, 2024Updated last year
- Extensible Azure Security Tool - Documentation☆83Jun 1, 2023Updated 2 years ago
- Hunting Queries for Defender ATP☆83Dec 14, 2025Updated 2 months ago
- Enable the automatic deployment of Azure Sentinel using code☆118May 3, 2022Updated 3 years ago
- ☆45Apr 10, 2024Updated last year
- ☆20Jan 19, 2026Updated last month
- Solutions developed by the MDEASM Customer Experience Engineering (CxE) Go-To Production (GTP) team for Azure MDEASM☆29Feb 3, 2025Updated last year
- urlyzer is a URL parsing analysis tool.☆24Jul 27, 2024Updated last year
- KQL queries for cyber defense and for solving daily issues☆55Jul 28, 2025Updated 7 months ago
- Bicep examples repo for log analytics, azure monitor and sentinel☆26Mar 16, 2023Updated 2 years ago
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆68Dec 7, 2025Updated 3 months ago
- A WDAC configuration repository with the sole intention of enriching MDE☆30Jun 18, 2025Updated 8 months ago
- Tools for Microsoft cloud fans☆372Nov 26, 2024Updated last year
- MISP to Sentinel integration☆79Feb 6, 2026Updated last month
- ☆31Mar 21, 2023Updated 2 years ago
- This is a repository for the Microsoft Defender Masterclass series.☆30Jun 28, 2021Updated 4 years ago
- Azure Cloud HSM SDK☆17Updated this week
- In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (…☆134Dec 18, 2025Updated 2 months ago
- A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.☆40Feb 19, 2026Updated 2 weeks ago
- Automation tool for Windows Deception Host Burn-In☆86Dec 4, 2024Updated last year
- Content from my blog.☆36May 5, 2025Updated 10 months ago
- Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …☆38Feb 20, 2025Updated last year
- A self-contained execution engine for the Kusto Query Language (KQL) written in C#☆38Sep 29, 2023Updated 2 years ago
- AzLogDcrIngestPS - Unleashing the power of Log Ingestion API with Azure LogAnalytics custom table v2, Azure Data Collection Rules and Azu…☆33Jan 26, 2025Updated last year