maartengoet / KQL

Related projects ⓘ

Alternatives and complementary repositories for KQL

• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆27Updated last year
• eshlomo1 / Azure-AD-Incident-Response
  Azure AD Incident Response
  ☆24Updated 3 years ago
• secgroundzero / KQL_Reference_Manual
  ☆40Updated 3 years ago
• chihebchebbi / Sentinel2Attack
  ☆14Updated 3 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆34Updated 4 months ago
• rod-trent / KQL-for-Everything
  KQL example queries for working in Azure
  ☆33Updated 3 months ago
• chihebchebbi / Azure-Sentinel-Report-Generator
  ☆14Updated 3 years ago
• Cyb3rWard0g / azure-loganalytics-api-clients
  A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…
  ☆23Updated last year
• MSAdministrator / PowerUp-With-PowerShell
  This repository is for a beginners PowerShell training course I am holding in central Missouri.
  ☆20Updated 7 years ago
• tvfischer / ps-srum-hunting
  PowerShell Script to facilitate the processing of SRUM data for on-the-fly forensics and if needed threat hunting
  ☆23Updated 5 years ago
• TheCloudScout / m365defender-adx
  ☆14Updated last year
• thalpius / Microsoft-Defender-for-Identity-Log-Analyzer
  ☆18Updated 5 months ago
• SecureHats / Sentinel-playground
  Solution to deploy a Sentinel playground demo environment
  ☆54Updated last year
• swimlane / PSCVSS
  A Windows PowerShell & PowerShell Core Module to calculate a CVSS3 Score based on a Vector string
  ☆12Updated last year
• f-bader / EntraIDAuditLogToMicrosoftGraph
  A list of Entra ID (Azure AD) Audit event names and the corresponding Microsoft Graph Request Uri
  ☆26Updated last month
• jsa2 / kql
  KQL for Azure Resource Manager and AppID search
  ☆22Updated 2 months ago
• f-bader / SentinelPesterFramework
  Check you Sentinel environment using Pester infrastructure tests
  ☆26Updated last year
• FalconForceTeam / KQLAnalyzer
  REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.
  ☆31Updated 6 months ago
• HarmJ0y / Invoke-ADDefense
  Defensive-oriented Active Directory enumeration
  ☆23Updated 8 years ago
• merill / graph-permissions-explorer
  Repository for public site hosting graph permissions
  ☆21Updated this week
• ugurkocde / KQL-Search
  ☆30Updated last year
• microsoft / ASDET
  ☆17Updated 3 years ago
• oliveirt / cActiveDirectorySecurity
  The cActiveDirectorySecurity module contains PowerShell Functions which are designed to report on and manipulate Access Control Lists on …
  ☆8Updated 6 years ago
• Corissalea / KQL-and-Workbooks
  Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!
  ☆20Updated 2 months ago
• PaulHCode / RecurringADChecks
  ☆13Updated 2 years ago
• Kaidja / Microsoft-Sentinel
  Microsoft Sentinel related content
  ☆33Updated last year