Alternatives and similar repositories for Azure-Threat-Research-Matrix

Users that are interested in Azure-Threat-Research-Matrix are comparing it to the libraries listed below

• gmellini / Microsoft-Defender-Security-Center-Hunting-Queries
  Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…
  ☆39Updated 4 years ago
• jsa2 / EAST
  Extensible Azure Security Tool - Documentation
  ☆82Updated last year
• secgroundzero / KQL_Reference_Manual
  ☆41Updated 3 years ago
• JoelGMSec / AzureGraph
  Azure AD enumeration over MS Graph
  ☆81Updated 2 years ago
• DefensiveOrigins / DO-LAB
  ☆47Updated last month
• jangeisbauer / gundog
  gundog - guided hunting in Microsoft Defender
  ☆52Updated 4 years ago
• dirkjanm / BloodHound-AzureAD
  BloodHound with a twist of cloud
  ☆78Updated 4 years ago
• secureworks / whiskeysamlandfriends
  GoldenSAML Attack Libraries and Framework
  ☆73Updated 11 months ago
• Blumira / Kerberoast-Detection
  Kerberoast Detection Script
  ☆30Updated 6 months ago
• mikoiv / MicrosoftSentinel-ShodanMonitor
  Ingesting Shodan Monitor Alerts to Microsoft Sentinel
  ☆34Updated last year
• improsec / 2Cloudz
  ☆24Updated 3 years ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆39Updated last month
• jsa2 / aadcookiespoof
  Azure AD Identity Protection Cookie Spoofing
  ☆33Updated last year
• csandker / Azure-AccessPermissions
  ☆108Updated 2 years ago
• talmaor / AzureADLateralMovement
  Lateral Movement graph for Azure Active Directory
  ☆122Updated 2 years ago
• NetSPI / FuncoPop
  Tools for attacking Azure Function Apps
  ☆80Updated 6 months ago
• center-for-threat-informed-defense / cloud-analytics
  Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…
  ☆53Updated 2 years ago
• maartengoet / notebooks
  Jupyter notebooks
  ☆25Updated 4 years ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆92Updated last year
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆90Updated 3 years ago
• zolderio / misp-to-sentinel
  Azure function to insert MISP data in to Azure Sentinel
  ☆32Updated 2 years ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆104Updated last year
• PwnDefend / AzureAuditPrep
  ☆13Updated 4 years ago
• netwrix / PingCastleCloud
  Audit program for AzureAD
  ☆147Updated last year
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆70Updated 5 months ago
• secureworks / TokenMan
  ☆100Updated 2 years ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆91Updated 3 weeks ago
• olafhartong / MDE-AuditCheck
  MDE relies on some of the Audit settings to be enabled
  ☆97Updated 2 years ago
• SygniaLabs / security-cloud-scout
  ☆137Updated 2 years ago
• mattrotlevi / lava
  Microsoft Azure Exploitation Framework
  ☆56Updated 3 years ago