Alternatives and similar repositories for Sparrow:

Users that are interested in Sparrow are comparing it to the libraries listed below

• CrowdStrike / CRT
  Contact: CRT@crowdstrike.com
  ☆715Updated last year
• T0pCyber / hawk
  Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
  ☆811Updated this week
• netevert / sentinel-attack
  Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
  ☆1,065Updated 3 months ago
• palantir / windows-event-forwarding
  A repository for using windows event forwarding for incident detection and response
  ☆1,246Updated 7 months ago
• mandiant / Mandiant-Azure-AD-Investigator
  ☆620Updated last year
• microsoft / Microsoft-365-Defender-Hunting-Queries
  Sample queries for Advanced hunting in Microsoft 365 Defender
  ☆1,966Updated 3 years ago
• Azure / Stormspotter
  Azure Red Team tool for graphing Azure and Azure Active Directory objects
  ☆1,582Updated last year
• nsacyber / Event-Forwarding-Guidance
  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…
  ☆860Updated 4 years ago
• alexverboon / MDATP
  MDATP
  ☆459Updated 7 months ago
• OTRF / Microsoft-Sentinel2Go
  Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.
  ☆564Updated last month
• microsoft / SecCon-Framework
  Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s …
  ☆281Updated 2 years ago
• cisagov / untitledgoosetool
  Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in…
  ☆925Updated 2 weeks ago
• reprise99 / Sentinel-Queries
  Collection of KQL queries
  ☆1,494Updated 2 months ago
• NetSPI / MicroBurst
  A collection of scripts for assessing Microsoft Azure security
  ☆2,110Updated this week
• Azure / SimuLand
  Understand adversary tradecraft and improve detection strategies
  ☆708Updated 2 years ago
• darkquasar / AzureHunter
  A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
  ☆777Updated 2 years ago
• cisagov / ScubaGear
  Automation to assess the state of your M365 tenant against CISA's baselines
  ☆1,990Updated this week
• microsoft / msticpy
  Microsoft Threat Intelligence Security Tools
  ☆1,818Updated this week
• microsoft / AaronLocker
  Robust and practical application control for Windows
  ☆619Updated 2 years ago
• mandiant / sunburst_countermeasures
  ☆561Updated last year
• davehull / Kansa
  A Powershell incident response framework
  ☆1,591Updated 2 years ago
• OfficeDev / O365-InvestigationTooling
  ☆576Updated 4 years ago
• CrowdStrike / psfalcon
  PowerShell for CrowdStrike's OAuth2 APIs
  ☆395Updated this week
• ukncsc / lme
  Logging Made Easy
  ☆708Updated last year
• soteria-security / 365Inspect
  A PowerShell script that automates the security assessment of Microsoft 365 environments.
  ☆604Updated 2 weeks ago
• GossiTheDog / ThreatHunting
  Tools for hunting for threats.
  ☆579Updated 4 months ago
• ScarredMonk / SysmonSimulator
  Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…
  ☆841Updated 3 years ago
• hausec / PowerZure
  PowerShell framework to assess Azure security
  ☆1,159Updated 6 months ago
• trustedsec / SysmonCommunityGuide
  TrustedSec Sysinternals Sysmon Community Guide
  ☆1,190Updated 9 months ago
• OTRF / Blacksmith
  Building environments to replicate small networks and deploy applications
  ☆320Updated last month