Sample queries for Advanced hunting in Windows Defender ATP
☆11Apr 22, 2020Updated 5 years ago
Alternatives and similar repositories for WindowsDefenderATP-Hunting-Queries
Users that are interested in WindowsDefenderATP-Hunting-Queries are comparing it to the libraries listed below
Sorting:
- Automated Phishing Tool☆11May 27, 2020Updated 5 years ago
- Scan git repos for secrets using regex and entropy 🔑☆10Jun 18, 2020Updated 5 years ago
- Azure PowerShell Scripts for Compute, Virtual Machines, Networking, Storage, Disks and Resource Groups.☆16Sep 24, 2024Updated last year
- Repo used to deploy Azure Resources using Terraform and GitHub Actions☆39Jan 26, 2026Updated last month
- AssemblyLine4 documentation☆28Mar 6, 2026Updated 2 weeks ago
- A central place for me to share interesting PSRemoting configurations☆16Jun 28, 2017Updated 8 years ago
- Set of ultra technical notes about AD☆18Jun 17, 2018Updated 7 years ago
- Efflanrs - GUI for Snaffler Output☆26Sep 13, 2024Updated last year
- PyVelociraptor contains the python bindings for the Velociraptor API.☆21Feb 11, 2026Updated last month
- Run individual configuration, compliance and security controls or full compliance benchmarks for CIS for Zoom using Powerpipe and Steampi…☆66Aug 14, 2025Updated 7 months ago
- A tool to attack ARP☆15May 27, 2021Updated 4 years ago
- Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests☆15Feb 27, 2021Updated 5 years ago
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- Fake Update Website ( On Click Automatic Download Windows Payload )☆11Apr 8, 2020Updated 5 years ago
- repository containing some nmap scripts☆16Jan 15, 2021Updated 5 years ago
- List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by develop…☆26Jun 30, 2021Updated 4 years ago
- KQL Queries☆34Feb 17, 2026Updated last month
- ☆13Mar 23, 2023Updated 2 years ago
- automated sticky keys backdoor☆10Feb 12, 2016Updated 10 years ago
- A PHP wrapper template to execute PowerShell payloads☆11Apr 2, 2021Updated 4 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Sep 26, 2017Updated 8 years ago
- Minimalistic WebUI for passiveDNS tool☆18May 6, 2021Updated 4 years ago
- ☆10Jul 8, 2024Updated last year
- ☆39Mar 12, 2026Updated last week
- Python code injection library☆10Jul 30, 2018Updated 7 years ago
- This is an Active Directory Pentesting Lab created by me which includes attacks like IPV6 DNS takeover, Smb relay, unconstrained delegati…☆22Jan 23, 2024Updated 2 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Vxheaven.org website's mirror☆23Nov 19, 2018Updated 7 years ago
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated 6 months ago
- Carbon Black Response IR tool☆55Dec 10, 2020Updated 5 years ago
- Transform EQL detection rules to VQL artifacts☆12Nov 12, 2021Updated 4 years ago
- A compilation of customizations for Debian-based Linux distrubutions (mostly Pop!_OS and Kali Linux) and (finally) a mostly automated scr…☆18Jan 1, 2026Updated 2 months ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 4 years ago
- Active Directory Pentesting Full Course - Red Team Hacking☆29Dec 13, 2021Updated 4 years ago
- A tool to download malwares☆16May 22, 2023Updated 2 years ago
- Netwitness Maltego integration Project☆18May 9, 2017Updated 8 years ago
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 9 years ago
- A project aimed at automating and making repetitive tasks easy while pentesting , like creating msf payloads or a one-liner reverse shel…☆11Nov 14, 2022Updated 3 years ago
- Exploit code for CVE-2019-17662☆18Sep 12, 2021Updated 4 years ago