The repository contains artifacts to create and publish reports, alerts, and dashboards based on Azure AD B2C logs. These artifacts can also be used for Security Information & Event Management (SIEM) related tasks.
☆67Jun 13, 2023Updated 2 years ago
Alternatives and similar repositories for siem
Users that are interested in siem are comparing it to the libraries listed below
Sorting:
- Tools to help implement Conditional Access Policies in Azure AD☆18Mar 20, 2024Updated last year
- various tools for Microsoft Sentinel☆32Jun 26, 2025Updated 8 months ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆277Jan 2, 2026Updated 2 months ago
- Small and highly portable detection tests.☆13Apr 13, 2018Updated 7 years ago
- Resources for I Want My EIP, presented at Derbycon 2017☆11Sep 23, 2017Updated 8 years ago
- ConditionalAccessforZeroTrustResources holding resources for Azure AD CA guidance for Zero Trust☆199Apr 2, 2024Updated last year
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆14Mar 27, 2024Updated last year
- Leak windows system info through a docx file☆12Feb 23, 2020Updated 6 years ago
- Export Microsoft Sentinel artifacts like Analytical Rules, Hunting Queries, Workbooks in order to support new feature Repositories CI/CD …☆59Sep 15, 2022Updated 3 years ago
- Six Degrees of Domain Admin☆15Oct 23, 2017Updated 8 years ago
- (WIP) CIS Microsoft Azure Foundations Benchmark☆17Dec 14, 2025Updated 2 months ago
- A simple ReST server to lookup threat actors (by name, synonym or UUID) and returning the corresponding MISP galaxy information about the…☆50Aug 30, 2025Updated 6 months ago
- Security Assessment Report geNerated Automatically☆42Sep 26, 2024Updated last year
- Azure AD Security controls check.☆16Feb 25, 2023Updated 3 years ago
- My IDA scripts, tips and testing techniques for Thick Client applications.☆17Jun 19, 2014Updated 11 years ago
- LetMeOutOfYour.net Resources☆21Jul 15, 2020Updated 5 years ago
- Prisma Cloud SDK in Go☆18Mar 24, 2025Updated 11 months ago
- Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)☆210Mar 1, 2026Updated last week
- ☆19Sep 3, 2021Updated 4 years ago
- Scripts to define your azure security governance as code and avoid manual settings of permissions and avoiding configuration drift☆21May 11, 2021Updated 4 years ago
- A collection of scripts to facilitate management of Microsoft Defender XDR products + Sentinel.☆31Nov 11, 2025Updated 3 months ago
- Ansible scripts to build an attack box☆24Sep 24, 2018Updated 7 years ago
- Microsoft Sentinel SOC Operations☆264Jul 10, 2024Updated last year
- ☆21Jan 16, 2023Updated 3 years ago
- FTester - firewall and IDS testing tool [historical]☆24Aug 2, 2017Updated 8 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Jul 5, 2020Updated 5 years ago
- Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)☆26Apr 13, 2020Updated 5 years ago
- Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.☆616Oct 17, 2025Updated 4 months ago
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,078Nov 28, 2024Updated last year
- aka GENESIDS: Reads and parses rules using a "snort like" syntax and generates and sends packets that trigger events in signature based I…☆23Nov 9, 2018Updated 7 years ago
- Run individual controls or full compliance benchmarks for CIS across all of your Microsoft 365 and Office 365 tenants using Powerpipe and…☆27Dec 2, 2025Updated 3 months ago
- Security Scanner based on CIS benchmark 1.1 inspired by Scout2☆54Feb 15, 2023Updated 3 years ago
- Insights and change tracking on Microsoft Entra ID Service Principals (Enterprise Applications, Applications and Managed Identities)☆248Apr 30, 2025Updated 10 months ago
- quick 'n dirty poc based on PoC windows auth prompt in c# based on https://gist.githubusercontent.com/mayuki/339952/raw/2c36b735bc51861a3…☆31Jun 12, 2020Updated 5 years ago
- A PowerShell script that checks for dangerous ACLs on system hives and shadows☆28Jul 21, 2021Updated 4 years ago
- Scan Entra for risk in role assignments and escalation paths☆80Dec 10, 2025Updated 2 months ago
- This sample demonstrates how to achieve Blue/Green Deployments in Azure Container Apps using Azure pipelines☆28Feb 14, 2026Updated 3 weeks ago
- Config files for my GitHub profile.☆10Oct 24, 2025Updated 4 months ago
- Windows 10 De-Clutter script☆25Jul 5, 2020Updated 5 years ago