A dataset containing Office 365 Unified Audit Logs for security research and detection
☆67Aug 12, 2026Updated 2 months ago
Alternatives and similar repositories for o365_dataset
Users that are interested in o365_dataset are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆75Oct 21, 2024Updated 2 years ago
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆25Oct 9, 2024Updated 2 years ago
- ☆20Updated this week
- The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…☆282Feb 2, 2021Updated 5 years ago
- This repo contains all the Microsoft Sentinel content build by EightFence for the Community☆14Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- /ˈhäjˌpäj/ "a confused mixture."☆16Oct 27, 2026Updated last week
- A fast, native desktop workbench for Azure Data Explorer☆14Updated this week
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆868Jun 29, 2026Updated 4 months ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆79Jan 9, 2024Updated 2 years ago
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆207Aug 11, 2026Updated 2 months ago
- 2021 SANS DFIR Summit: Greppin' Logs☆20Oct 30, 2025Updated last year
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆87Jan 6, 2026Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆114Apr 8, 2026Updated 6 months ago
- Repository with supporting materials for Invictus Academy/Training☆45Jul 22, 2026Updated 3 months ago
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆247Sep 15, 2026Updated last month
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆242Oct 26, 2025Updated last year
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆189Oct 29, 2026Updated last week
- Personal settings for X-Ways Forensics☆36Apr 28, 2022Updated 4 years ago
- ☆30Jan 13, 2026Updated 9 months ago
- A Windows registry file parser written in Rust☆43Oct 30, 2025Updated last year
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PowerShell module for Office 365 and Azure log collection☆284Sep 22, 2025Updated last year
- An AWS CloudTrail exported logs analyzer tool☆21Oct 7, 2026Updated last month
- VTC - Velociraptor Timeline Creator☆20May 15, 2024Updated 2 years ago
- Parses KAPE module files and downloads binaries referenced by BinaryURL☆18Oct 2, 2019Updated 7 years ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆687Oct 26, 2026Updated last week
- Presentations from yours truely☆28Sep 11, 2026Updated last month
- Azure function to insert MISP data in to Azure Sentinel☆34Oct 19, 2022Updated 4 years ago
- A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …☆208Oct 29, 2025Updated last year
- ETWhat is a Windows utility that determines whether Event Tracing for Windows (ETW) providers operate in kernel mode or user mode.☆10Jun 9, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Snort_rules detection bad actors.☆30Jul 14, 2026Updated 3 months ago
- ☆20Oct 23, 2020Updated 6 years ago
- Notes on responding to security breaches relating to Azure AD☆130Mar 14, 2022Updated 4 years ago
- Discover how every _CL table gets its data into Microsoft Sentinel. Scans Logic Apps, Azure Functions, AMA agents, Arc machines, DCRs, an…☆12Mar 29, 2026Updated 7 months ago
- Repository of attack and defensive information for Business Email Compromise investigations☆282Jun 17, 2026Updated 4 months ago
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆37May 25, 2024Updated 2 years ago
- A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…☆27Jan 2, 2023Updated 3 years ago