hesaad / M365DPlaybooks
M365 Defender SOC Playbooks
☆21Updated last year
Related projects: ⓘ
- ResearchDev - XDR & SIEM Detection☆61Updated 5 months ago
- ☆42Updated 3 months ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆10Updated 11 months ago
- Sentinel Logic Apps/Playbooks to automate enrichment, incident analysis and more.☆67Updated last month
- ☆48Updated last year
- Ingesting Shodan Monitor Alerts to Microsoft Sentinel☆33Updated last year
- A series of PowerShell scripts to automate the assessment of Azure IaaS security☆15Updated 2 weeks ago
- ☆40Updated 11 months ago
- Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…☆35Updated 3 years ago
- ☆40Updated 5 months ago
- Reportly is an AzureAD user activity report tool.☆88Updated last year
- The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…☆35Updated last year
- Michael Melone's Kusto Query library☆17Updated 10 months ago
- gundog - guided hunting in Microsoft Defender☆52Updated 3 years ago
- Presentations from Conferences☆25Updated this week
- ASR Configurator, Essentials and Atomic Testing☆32Updated 3 weeks ago
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆54Updated this week
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆40Updated 5 months ago
- ☆22Updated 2 years ago
- Links and guidance related to the return on mitigation report in the Microsoft Digital Defense Report☆27Updated 11 months ago
- Hunting Queries for Defender ATP☆70Updated last week
- ☆104Updated last year
- Security Scripts and Sources for daily usage.☆44Updated last week
- Azure AD Incident Response☆24Updated 2 years ago
- Sentinel BEC IR☆15Updated 2 years ago
- A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.☆40Updated last year
- ☆17Updated this week
- A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout T…☆14Updated last year
- ☆39Updated 3 years ago
- Collection of Microsoft Identity Threat Detection and Response resources.☆31Updated 2 weeks ago