Alternatives and similar repositories for Sparrow

Users that are interested in Sparrow are comparing it to the libraries listed below

• CrowdStrike / CRT
  Contact: CRT@crowdstrike.com
  ☆729Updated 2 years ago
• T0pCyber / hawk
  Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
  ☆848Updated 2 months ago
• netevert / sentinel-attack
  Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
  ☆1,070Updated 6 months ago
• microsoft / Microsoft-365-Defender-Hunting-Queries
  Sample queries for Advanced hunting in Microsoft 365 Defender
  ☆2,000Updated 3 years ago
• OTRF / Microsoft-Sentinel2Go
  Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.
  ☆569Updated 4 months ago
• mandiant / Mandiant-Azure-AD-Investigator
  ☆626Updated last year
• reprise99 / Sentinel-Queries
  Collection of KQL queries
  ☆1,528Updated 5 months ago
• cisagov / untitledgoosetool
  Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in…
  ☆929Updated last month
• Azure / SimuLand
  Understand adversary tradecraft and improve detection strategies
  ☆709Updated 2 years ago
• trustedsec / SysmonCommunityGuide
  TrustedSec Sysinternals Sysmon Community Guide
  ☆1,218Updated last year
• cisagov / ScubaGear
  Automation to assess the state of your M365 tenant against CISA's baselines
  ☆2,150Updated this week
• ukncsc / lme
  Logging Made Easy
  ☆712Updated last year
• alexverboon / MDATP
  MDATP
  ☆460Updated 10 months ago
• palantir / windows-event-forwarding
  A repository for using windows event forwarding for incident detection and response
  ☆1,263Updated 9 months ago
• NetSPI / MicroBurst
  A collection of scripts for assessing Microsoft Azure security
  ☆2,170Updated 2 months ago
• microsoft / msticpy
  Microsoft Threat Intelligence Security Tools
  ☆1,869Updated last week
• sans-blue-team / DeepBlueCLI
  ☆2,281Updated last year
• rod-trent / SentinelKQL
  Azure Sentinel KQL
  ☆447Updated 8 months ago
• cisagov / cset
  Cybersecurity Evaluation Tool
  ☆1,568Updated this week
• Gerenios / AADInternals
  AADInternals PowerShell module for administering Azure AD and Office 365
  ☆1,433Updated last month
• Azure / Stormspotter
  Azure Red Team tool for graphing Azure and Azure Active Directory objects
  ☆1,606Updated last year
• olafhartong / sysmon-modular
  A repository of sysmon configuration modules
  ☆2,788Updated 9 months ago
• microsoft / SecCon-Framework
  Security configuration is complex. With thousands of group policies available in Windows, choosing the “best” setting is difficult. It’s …
  ☆285Updated 2 years ago
• cyberark / SkyArk
  SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
  ☆892Updated 5 months ago
• nsacyber / Event-Forwarding-Guidance
  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…
  ☆866Updated 4 years ago
• Azure / Azure-Sentinel-Notebooks
  Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.
  ☆590Updated last month
• mandiant / sunburst_countermeasures
  ☆560Updated 2 years ago
• hausec / PowerZure
  PowerShell framework to assess Azure security
  ☆1,191Updated 8 months ago
• GossiTheDog / ThreatHunting
  Tools for hunting for threats.
  ☆583Updated last month
• soteria-security / 365Inspect
  A PowerShell script that automates the security assessment of Microsoft 365 environments.
  ☆619Updated last month