anthonws / MDATP_PoSh_Scripts

Related projects ⓘ

Alternatives and complementary repositories for MDATP_PoSh_Scripts

• alexverboon / PSMDATP
  PowerShell Module for managing Microsoft Defender Advanced Threat Protection
  ☆69Updated last year
• rucam / defender-comparison
  ☆58Updated 8 months ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆61Updated last week
• ThomasVrhydn / MDE-troubleshooter
  ☆37Updated last year
• nathanmcnulty / nathanmcnulty
  ☆81Updated this week
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆27Updated 3 months ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆92Updated 2 weeks ago
• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆65Updated last year
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆41Updated 3 weeks ago
• thalpius / Microsoft-Defender-for-Identity-Configuration-Checker
  ☆43Updated last year
• Kaidja / Microsoft-Sentinel
  Microsoft Sentinel related content
  ☆33Updated last year
• ugurkocde / KQL_Intune
  ☆75Updated 9 months ago
• cventour / PoSH
  Random Powershell scripts
  ☆13Updated 8 months ago
• soteria-security / ADInspect
  A PowerShell script that automates the security assessment of Microsoft Active Directory environments.
  ☆62Updated 2 years ago
• Kili69 / Tier0-User-Management
  Maintain Tier 0 users. This script take care all Tier 0 users are in the correct OU or in the default user container and add the Kerberos…
  ☆52Updated this week
• mon-csirt / active-directory-security
  The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…
  ☆85Updated last month
• Corissalea / KQL-and-Workbooks
  Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!
  ☆20Updated 2 months ago
• alexverboon / WindowsDefenderATP-Hunting-Queries
  Sample queries for Advanced hunting in Microsoft Defender ATP
  ☆35Updated 2 years ago
• JeffMichelmore / MDEKit
  ☆40Updated last year
• jangeisbauer / AdvancedHunting
  Advanced Hunting Queries for Microsoft Security Products
  ☆106Updated last year
• EvotecIT / PowerShellManager
  Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.
  ☆40Updated 3 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆34Updated 4 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆99Updated 3 months ago
• reprise99 / Azure-Sentinel
  Cloud-native SIEM for intelligent security analytics for your entire enterprise.
  ☆20Updated 2 years ago
• ugurkocde / IntuneDeviceQuery
  This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.
  ☆56Updated 9 months ago
• Cyberlorians / Articles
  ☆48Updated this week
• BohrenAn / GitHub_PowerShellScripts
  ☆83Updated this week
• jsa2 / AADAppAudit
  Microsoft Entra ID App Audit Solution (AADAppAudit)
  ☆80Updated 2 months ago
• nicolonsky / ConditionalAccessDocumentation
  Azure AD Conditional Access Documentation with PowerShell
  ☆141Updated 6 months ago
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆100Updated 9 months ago