bluemountaincyber / building-detections-azureLinks
☆13Updated last year
Alternatives and similar repositories for building-detections-azure
Users that are interested in building-detections-azure are comparing it to the libraries listed below
Sorting:
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆60Updated 5 months ago
- Content Repo for Demystifying KQL Tutorial Series☆72Updated last year
- Notes on responding to security breaches relating to Azure AD☆120Updated 3 years ago
- A guide to using Azure Data Explorer and KQL for DFIR☆121Updated 3 years ago
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆67Updated last month
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆55Updated 2 years ago
- MISP to Sentinel integration☆79Updated last month
- ☆45Updated last year
- Repository with Sentinel Analytics Rules, Hunting Queries and helpful external data sources.☆134Updated 3 weeks ago
- A collection of various SIEM rules relating to malware family groups.☆70Updated last year
- Cloud-native SIEM for intelligent security analytics for your entire enterprise.☆21Updated 4 years ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆12Updated 2 months ago
- ☆96Updated last month
- Security Scripts and Sources for daily usage.☆70Updated 2 weeks ago
- A collection of ARM-based detections for Azure/AzureAD based TTPs☆89Updated 2 years ago
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆40Updated last year
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆77Updated last year
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆112Updated last week
- KQL queries for cyber defense and for solving daily issues☆54Updated 5 months ago
- This code snippet retrieves Azure Sentinel rules that are mapped to MITRE ATT&CK Framework and generates the related MITRE D3FEND defense…☆74Updated 4 years ago
- Hunting Queries for Defender ATP☆82Updated 3 weeks ago
- Conference presentations☆60Updated 2 months ago
- Repository with Sample KQL Query examples for Threat Hunting☆217Updated 3 years ago
- Advanced Threat Hunting: Ransomware Group☆29Updated 6 months ago
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆321Updated 2 months ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆144Updated 3 years ago
- KQL Queries☆28Updated last month
- ☆15Updated 2 years ago
- In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (…☆132Updated 3 weeks ago
- Repository of attack and defensive information for Business Email Compromise investigations☆272Updated 8 months ago