MISP to Microsoft Defender integration
☆19Jul 9, 2026Updated 3 months ago
Alternatives and similar repositories for misp2defender
Users that are interested in misp2defender are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Balanced Scorecard for Cyber Resilience☆13Nov 17, 2025Updated 11 months ago
- KQL for Azure Resource Manager and AppID search☆23Aug 15, 2024Updated 2 years ago
- Generates a detailed CSV file containing Sigma Rules statistics for each service or category, and each level, offering a holistic view of…☆10Dec 22, 2023Updated 2 years ago
- ☆23Jan 31, 2023Updated 3 years ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆88Sep 30, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- MISP to Sentinel integration☆80Jul 4, 2026Updated 3 months ago
- Farsight DNSDB Version 2 with Flexible Search SDK for Python☆10Updated this week
- Community-driven PowerShell detection indicators☆47Jan 27, 2026Updated 9 months ago
- ☆31Nov 25, 2025Updated 11 months ago
- Deep Packet Inspection • Traffic Forensics • Network Threat Detection☆56Feb 20, 2026Updated 8 months ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- SOCAutomators Substack blog companion — threat research, DBIR analysis, and security operations content☆21Jun 3, 2026Updated 4 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆58Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- How can you track the hunting techniques you come up with?☆13Sep 3, 2017Updated 9 years ago
- PowerShell-based Windows Server Security Audit Engine by Cyb3rint3l Labs. Measures alignment with the NIS2 directive and maps findings to…☆48Feb 1, 2026Updated 9 months ago
- Random Powershell scripts☆13Feb 13, 2024Updated 2 years ago
- Incident Response documents and tooling☆133Jul 22, 2026Updated 3 months ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.☆194Feb 20, 2026Updated 8 months ago
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- KQL Queries☆44Oct 2, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆39Oct 30, 2024Updated 2 years ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- shellDAVpass application is the Open-Source project, the main idea of which is to bypass the defender and AntiVirus detections to conduct…☆27Oct 3, 2025Updated last year
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- Detection engineering template☆15Jul 24, 2025Updated last year
- Presentations from yours truely☆28Sep 11, 2026Updated last month
- ☆21Sep 11, 2026Updated last month
- MineMeld nodes for MISP☆19Jan 23, 2024Updated 2 years ago
- Playbooks designed for IBM SOAR developed by The IR Gurus. These playbooks can be used to demonstrate how to design playbooks, perform au…☆19May 1, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An informational repo about hunting for adversaries in your IT environment.☆14Apr 10, 2017Updated 9 years ago
- ☆103Oct 19, 2026Updated last week
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- Detect malicious domain, Blablablablabla☆27Jan 8, 2017Updated 9 years ago
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Oct 18, 2026Updated 2 weeks ago
- A web application for generating, parsing and validating, manipulating, visualizing and executing CACAO v2.0 playbooks.☆43Jun 6, 2026Updated 4 months ago