Microsoft Sentinel SIEM Log Source Analyzer
☆31Oct 27, 2026Updated 2 weeks ago
Alternatives and similar repositories for log-horizon
Users that are interested in log-horizon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆25Oct 1, 2026Updated last month
- Detection rules and threat hunting queries in Defender XDR and Azure Sentinel☆17Mar 13, 2026Updated 7 months ago
- Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It cros…☆22Oct 31, 2026Updated last week
- KQL Detections for Microsoft Sentinel and Microsoft 365 Defender☆22Nov 15, 2024Updated last year
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆161Apr 1, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated last month
- ☆21Sep 11, 2026Updated 2 months ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- A PowerShell module for the Defender XDR portal☆151Nov 6, 2026Updated last week
- A repo to hold KQL queries as part of my 100 days of KQL effort.☆19Aug 5, 2026Updated 3 months ago
- Collection of Microsoft Identity Threat Detection and Response resources.☆58Nov 1, 2026Updated last week
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 6 months ago
- ☆86Feb 4, 2026Updated 9 months ago
- ☆14Jul 16, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repository with Sentinel Analytics Rules, Hunting Queries and helpful external data sources.☆152Updated this week
- Manage and maintain Defender XDR custom collection configuration☆42Nov 19, 2025Updated 11 months ago
- Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MIT…☆186Updated this week
- AI Deception Layer for - containing adversarial context designed to redirect or confuse an LLM agent reading your own infrastructure☆15Jun 23, 2026Updated 4 months ago
- Defender Resource Hub☆32Sep 28, 2026Updated last month
- Discover how every _CL table gets its data into Microsoft Sentinel. Scans Logic Apps, Azure Functions, AMA agents, Arc machines, DCRs, an…☆12Mar 29, 2026Updated 7 months ago
- Sentinel Analytics Rule converter PowerShell module☆71Feb 24, 2026Updated 8 months ago
- ☆14Sep 2, 2026Updated 2 months ago
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆68Mar 30, 2026Updated 7 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Tier0 (Tier Zero) Account discovery for ActiveDirectory Security☆17Apr 11, 2018Updated 8 years ago
- Post-Exploitation EVTX Analyzer for BloodHound Mapping☆15May 8, 2026Updated 6 months ago
- A threat hunting process☆153Nov 4, 2026Updated last week
- Collection of different Azure/Entra focused solutions (Deployable templates, Function Apps, etc)☆81Apr 12, 2026Updated 7 months ago
- Share Information about Microsoft Security Products☆155Updated this week
- ☆14Updated this week
- ☆94Sep 25, 2026Updated last month
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Updated this week
- ☆72Apr 20, 2026Updated 6 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆28Nov 6, 2026Updated last week
- Discover gaps in Entra Conditional Access policies before attackers do☆140Jun 8, 2026Updated 5 months ago
- Interactive map of OAuth, Conditional Access, Entra Agent ID and MCP authentication flows, step by step☆70Updated this week
- how to strangle threats☆70Updated this week
- ☆15Updated this week
- Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…☆295Jun 23, 2026Updated 4 months ago
- Community-driven PowerShell detection indicators☆47Jan 27, 2026Updated 9 months ago
Are these results useful?