Alternatives and similar repositories for KqlTools

Users that are interested in KqlTools are comparing it to the libraries listed below

• jsa2 / aad-auth-n-z
  ☆67Updated 3 years ago
• maartengoet / KQL
  KQL queries
  ☆13Updated 6 years ago
• KnudsenMorten / AzureLogLibrary
  AzureLogLibrary - repository used for Azure logging with ARM-templates, scripts, documentation to deploy DCRs, extensions, etc
  ☆13Updated 2 years ago
• merill / microsoft-info
  Repository hosting a static list of Microsoft First party apps and Graph permissions that's updated daily
  ☆155Updated last week
• SureStacks / AzureAssess
  Assess Azure Security State
  ☆37Updated last year
• SecureHats / Sentinel-playground
  Solution to deploy a Sentinel playground demo environment
  ☆56Updated 2 years ago
• microsoft / EventLogExpert
  ☆213Updated 3 months ago
• nicolonsky / ITDR
  Collection of Microsoft Identity Threat Detection and Response resources.
  ☆49Updated last month
• merill / graph-permissions-explorer
  Repository for public site hosting graph permissions
  ☆28Updated 2 months ago
• rod-trent / OnPremSecMonitoring4Sentinel
  ☆18Updated 3 years ago
• azsec / azure-sentinel-tools
  A collection of scripts and works related to Azure Sentinel
  ☆41Updated 3 years ago
• rod-trent / KQL-for-Everything
  KQL example queries for working in Azure
  ☆34Updated last year
• wortell / KQL
  KQL queries for Advanced Hunting
  ☆175Updated 5 years ago
• FalconForceTeam / KQLAnalyzer
  REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.
  ☆39Updated last week
• Azure / MDTI-Solutions
  Repository to publish sample use cases, templates, solutions, automations for Microsoft Defender Threat Intelligence (MDTI) product
  ☆78Updated last year
• KnudsenMorten / ClientInspectorV2
  ClientInspectorV2 - Unleashing the power of Azure LogAnalytics, Azure Data Collection Rules, Log Ingestion API by doing client inventory …
  ☆25Updated 2 years ago
• f-bader / SentinelARConverter
  Sentinel Analytics Rule converter PowerShell module
  ☆65Updated 8 months ago
• pkhabazi / sentineldevops
  Deploying and Managing Azure Sentinel – Ninja style
  ☆32Updated 4 years ago
• alexverboon / PSMDATP
  PowerShell Module for managing Microsoft Defender Advanced Threat Protection
  ☆73Updated 2 years ago
• javiersoriano / sentinel-training
  ☆39Updated 4 years ago
• MicrosoftDocs / ATADocs
  Public content repo for ATA documentation in OPS
  ☆75Updated 7 months ago
• microsoft / AzureADToolkit
  PowerShell module to manage Azure Active Directory app credentials.
  ☆119Updated last year
• le0li9ht / Microsoft-Sentinel-Queries
  KQL queries for cyber defense and for solving daily issues
  ☆52Updated 2 months ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆79Updated 11 months ago
• Cloud-Architekt / AzureSentinel
  Sharing my KQL queries for Azure Sentinel
  ☆186Updated last week
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆27Updated last year
• microsoft / microsoft-defender-for-endpoint-manageability
  Microsoft Defender ATP Manageability and Maintenance scripts
  ☆27Updated 2 years ago
• jsa2 / AADAppAudit
  Microsoft Entra ID App Audit Solution (AADAppAudit)
  ☆83Updated last year
• jkerai1 / SoftwareCertificates
  Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC
  ☆48Updated this week
• Cloud-Architekt / AzurePrivilegedIAM
  Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.
  ☆173Updated 2 weeks ago