Alternatives and similar repositories for Azure-Threat-Research-Matrix:

Users that are interested in Azure-Threat-Research-Matrix are comparing it to the libraries listed below

• jsa2 / EAST
  Extensible Azure Security Tool - Documentation
  ☆81Updated last year
• secgroundzero / KQL_Reference_Manual
  ☆41Updated 3 years ago
• dirkjanm / BloodHound-AzureAD
  BloodHound with a twist of cloud
  ☆78Updated 4 years ago
• gmellini / Microsoft-Defender-Security-Center-Hunting-Queries
  Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…
  ☆39Updated 4 years ago
• Blumira / Kerberoast-Detection
  Kerberoast Detection Script
  ☆30Updated 5 months ago
• jangeisbauer / gundog
  gundog - guided hunting in Microsoft Defender
  ☆52Updated 3 years ago
• JoelGMSec / AzureGraph
  Azure AD enumeration over MS Graph
  ☆80Updated 2 years ago
• DefensiveOrigins / DO-LAB
  ☆47Updated last week
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆103Updated last year
• improsec / 2Cloudz
  ☆23Updated 3 years ago
• netwrix / PingCastleCloud
  Audit program for AzureAD
  ☆147Updated last year
• PwnDefend / AzureAuditPrep
  ☆13Updated 4 years ago
• talmaor / AzureADLateralMovement
  Lateral Movement graph for Azure Active Directory
  ☆122Updated 2 years ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆39Updated last week
• csandker / Azure-AccessPermissions
  ☆108Updated 2 years ago
• center-for-threat-informed-defense / cloud-analytics
  Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…
  ☆53Updated 2 years ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆91Updated this week
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆92Updated last year
• iknowjason / BlueCloud
  Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
  ☆133Updated 2 years ago
• Neo23x0 / Talks
  Slides of my public talks
  ☆55Updated last year
• microsoft / msticpy-lab
  A lab environment for learning about MSTICPy
  ☆36Updated 2 years ago
• SygniaLabs / security-cloud-scout
  ☆136Updated 2 years ago
• NetSPI / FuncoPop
  Tools for attacking Azure Function Apps
  ☆70Updated 5 months ago
• jsa2 / aadcookiespoof
  Azure AD Identity Protection Cookie Spoofing
  ☆32Updated last year
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆90Updated 3 years ago
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆69Updated 4 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆105Updated 4 months ago
• BushidoUK / Abused-Legitimate-Services
  Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups
  ☆60Updated 2 years ago
• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆93Updated last year
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆87Updated last year