Alternatives and similar repositories for M365SAT:

Users that are interested in M365SAT are comparing it to the libraries listed below

• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆104Updated last year
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆143Updated last month
• alexverboon / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆134Updated last week
• Cloud-Architekt / AzurePrivilegedIAM
  Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.
  ☆145Updated 2 weeks ago
• aollivierre / ConditionalAccess
  This repository contains a comprehensive set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID (…
  ☆78Updated last month
• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆66Updated 2 years ago
• alexverboon / WindowsDefenderATP-Hunting-Queries
  Sample queries for Advanced hunting in Microsoft Defender ATP
  ☆37Updated 3 years ago
• Cloud-Architekt / AzureSentinel
  Sharing my KQL queries for Azure Sentinel
  ☆152Updated 2 weeks ago
• LearningKijo / MDEtester
  MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.
  ☆187Updated 11 months ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆99Updated 3 months ago
• nathanmcnulty / nathanmcnulty
  ☆220Updated this week
• jsa2 / AADAppAudit
  Microsoft Entra ID App Audit Solution (AADAppAudit)
  ☆82Updated 5 months ago
• mattnovitsch / M365
  ☆54Updated last month
• ThomasVrhydn / MDE-troubleshooter
  This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …
  ☆54Updated last week
• ugurkocde / KQL_Intune
  ☆81Updated last year
• Cyberlorians / Articles
  ☆51Updated last week
• merill / microsoft-info
  Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily
  ☆109Updated this week
• eneerge / CIS-Microsoft-Intune-For-Windows-IntuneProfile
  ☆43Updated 5 months ago
• lawndoc / AdvancedHuntingQueries
  Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.
  ☆119Updated 6 months ago
• ep3p / Sentinel_KQL
  In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (…
  ☆110Updated this week
• rod-trent / SentinelWorkbooks
  Workbooks for Azure Sentinel
  ☆58Updated last year
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆43Updated 4 months ago
• chadmcox / Azure_Active_Directory
  Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics
  ☆64Updated this week
• rod-trent / SentinelPlaybooks
  ☆55Updated 6 months ago
• EvotecIT / PasswordSolution
  This module allows the creation of password expiry emails for users, managers, administrators, and security according to defined template…
  ☆114Updated 3 weeks ago
• BohrenAn / GitHub_PowerShellScripts
  ☆86Updated last month
• canix1 / PIMSCAN
  Tool for creating reports on Entra ID Role Assignments
  ☆91Updated 10 months ago
• jflieben / assortedFunctionsV2
  ☆66Updated this week
• PuravsPoint / DecipheringUAL
  This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365…
  ☆56Updated 9 months ago
• j0eyv / ConditionalAccessBaseline
  ☆103Updated this week