jsa2 / kqlLinks
KQL for Azure Resource Manager and AppID search
☆24Updated last year
Alternatives and similar repositories for kql
Users that are interested in kql are comparing it to the libraries listed below
Sorting:
- Microsoft Entra ID App Audit Solution (AADAppAudit)☆85Updated last year
- ☆36Updated 3 weeks ago
- ☆53Updated 2 weeks ago
- PowerShell module to help getting tokens using managed identities☆17Updated 11 months ago
- Microsoft Sentinel related content☆37Updated 10 months ago
- Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)☆186Updated this week
- A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri☆35Updated last year
- ☆44Updated 2 years ago
- MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.☆191Updated last year
- Azure AD Security controls check.☆16Updated 2 years ago
- MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore☆65Updated 2 years ago
- Check you Sentinel environment using Pester infrastructure tests☆31Updated 2 years ago
- ☆53Updated 2 months ago
- Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!☆20Updated last year
- KQL example queries for working in Azure☆35Updated this week
- Everything about Microsoft Cloud Security!☆55Updated last year
- MS Entra ID Protection Guidance☆22Updated last year
- This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …☆72Updated 2 weeks ago
- Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.☆177Updated 2 weeks ago
- ☆50Updated 3 weeks ago
- ☆27Updated 10 months ago
- ☆45Updated 7 months ago
- ☆62Updated last year
- A collection of Microsoft Sentinel workbooks and analytics rules.☆111Updated last year
- CIS & Azure Security Center Hardening recommendations implemented in PowerShell DSC from Azure Automation☆34Updated 4 years ago
- Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily☆170Updated last week
- ☆79Updated last month
- ClientInspectorV2 - Unleashing the power of Azure LogAnalytics, Azure Data Collection Rules, Log Ingestion API by doing client inventory …☆25Updated 2 years ago
- The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect…☆59Updated 3 weeks ago
- Sentinel Analytics Rule converter PowerShell module☆65Updated 10 months ago