Microsoft Sentinel SIEM Log Source Analyzer
☆31Oct 19, 2026Updated this week
Alternatives and similar repositories for log-horizon
Users that are interested in log-horizon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detection rules and threat hunting queries in Defender XDR and Azure Sentinel☆16Mar 13, 2026Updated 7 months ago
- ☆25Oct 1, 2026Updated 3 weeks ago
- Interactive map of OAuth, Conditional Access, Entra Agent ID and MCP authentication flows, step by step☆52Oct 2, 2026Updated 3 weeks ago
- KQL Detections for Microsoft Sentinel and Microsoft 365 Defender☆22Nov 15, 2024Updated last year
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 6 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated 3 weeks ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Oct 16, 2026Updated last week
- ☆28Aug 24, 2026Updated last month
- Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MIT…☆184Updated this week
- A repo to hold KQL queries as part of my 100 days of KQL effort.☆19Aug 5, 2026Updated 2 months ago
- ☆21Sep 11, 2026Updated last month
- Manage and maintain Defender XDR custom collection configuration☆40Nov 19, 2025Updated 11 months ago
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 5 months ago
- Defender Resource Hub☆32Sep 28, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆85Feb 4, 2026Updated 8 months ago
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆20Oct 2, 2026Updated 3 weeks ago
- Sentinel Analytics Rule converter PowerShell module☆71Feb 24, 2026Updated 7 months ago
- A threat hunting process☆144Oct 2, 2026Updated 3 weeks ago
- CTI resources for Claude, maintained by Feedly☆35Oct 7, 2026Updated 2 weeks ago
- Share Information about Microsoft Security Products☆154Updated this week
- Repository with Sentinel Analytics Rules, Hunting Queries and helpful external data sources.☆150Updated this week
- A PowerShell module for the Defender XDR portal☆145Oct 1, 2026Updated 3 weeks ago
- Tier0 (Tier Zero) Account discovery for ActiveDirectory Security☆17Apr 11, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Collection of different Azure/Entra focused solutions (Deployable templates, Function Apps, etc)☆81Apr 12, 2026Updated 6 months ago
- ☆91Sep 25, 2026Updated 3 weeks ago
- Collection of Microsoft Identity Threat Detection and Response resources.☆57Oct 1, 2026Updated 3 weeks ago
- how to strangle threats☆69Updated this week
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated last year
- Discover gaps in Entra Conditional Access policies before attackers do☆137Jun 8, 2026Updated 4 months ago
- 200+ behavioral detection rules for Kunai (Linux eBPF). Covers MITRE ATT&CK with 92 techniques across execve, connect, DNS, file ops, ptr…☆23Mar 30, 2026Updated 6 months ago
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆89Oct 8, 2026Updated 2 weeks ago
- ☆70Apr 20, 2026Updated 6 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.☆250Oct 8, 2026Updated 2 weeks ago
- Community-driven PowerShell detection indicators☆46Jan 27, 2026Updated 8 months ago
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated 2 years ago
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆291Jun 23, 2026Updated 4 months ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated last week
- Microsoft Sentinel related content☆39Jan 22, 2025Updated last year
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year