☆29May 1, 2025Updated last year
Alternatives and similar repositories for Sentinel
Users that are interested in Sentinel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes☆22Mar 11, 2021Updated 5 years ago
- Cheatsheets and other Yealink Phone information.☆17Apr 13, 2018Updated 8 years ago
- Collections of way to evade normal detection events.☆23Sep 13, 2020Updated 6 years ago
- ☆24Oct 13, 2025Updated last year
- KQL Detections for Microsoft Sentinel and Microsoft 365 Defender☆22Nov 15, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Rules I have researched for Microsoft Sentinel in my spare time. If someone wants to offer me a job I am open. Anyone can use this. Pleas…☆17Mar 29, 2026Updated 6 months ago
- Utilities for Microsoft Sentinel☆20Dec 7, 2025Updated 10 months ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated last month
- Sigma Queries turned into KQL for Defender using pysigma☆12Mar 29, 2026Updated 7 months ago
- ☆58Updated this week
- Share Information about Microsoft Security Products☆154Updated this week
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆39Oct 30, 2024Updated last year
- Export Microsoft Sentinel artifacts like Analytical Rules, Hunting Queries, Workbooks in order to support new feature Repositories CI/CD …☆59Sep 15, 2022Updated 4 years ago
- This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup…☆15Sep 5, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of various SIEM rules relating to malware family groups.☆72Jun 18, 2024Updated 2 years ago
- This repo contains all the Microsoft Sentinel content build by EightFence for the Community☆14Updated this week
- Content Repo for Demystifying KQL Tutorial Series☆74Sep 1, 2024Updated 2 years ago
- Collection of Dashboards for Threat Hunting and more!☆76Oct 17, 2020Updated 6 years ago
- A collection of Microsoft Sentinel workbooks and analytics rules.☆111Feb 8, 2024Updated 2 years ago
- Response MCP server for Agentic SOC☆21Feb 3, 2026Updated 8 months ago
- Collection of Suricata rule sets that I use modified to my environments.☆38Sep 13, 2020Updated 6 years ago
- Sample queries and data as part of the Microsoft Press book, The Definitive Guide to KQL☆291Aug 28, 2024Updated 2 years ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Oct 15, 2026Updated 2 weeks ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- ☆72Apr 20, 2026Updated 6 months ago
- Collection of scripts, files, and tips to create and maintain networks, hack, and more!☆78Jun 13, 2021Updated 5 years ago
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Oct 7, 2026Updated 3 weeks ago
- Model Context Protocol server for querying Graylog 6+ from AI assistants☆12Sep 7, 2026Updated last month
- An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bice…☆79Updated this week
- Model Context Protocol (MCP) server that provides access to Azure Resource Graph queries. It allows you to retrieve information about Azu…☆18May 6, 2025Updated last year
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆125Jan 18, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PowerShell module for the Defender XDR portal☆146Oct 22, 2026Updated last week
- node-pushbullet-cli☆10Jul 8, 2016Updated 10 years ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆292Jan 2, 2026Updated 9 months ago
- Osquery Packs we use for customer security hardening☆12Jun 30, 2025Updated last year
- NOVA MCP is a MCP that leverages NOVA for prompt security☆14Apr 21, 2025Updated last year
- MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore☆65Dec 26, 2022Updated 3 years ago
- Automates the entire workflow for packaging Windows applications and deploying them to Microsoft Intune☆19Oct 17, 2026Updated last week