Microsoft Threat Intelligence
☆216Oct 8, 2026Updated this week
Alternatives and similar repositories for mstic
Users that are interested in mstic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MSTIC Notebook Components☆36Jul 8, 2026Updated 3 months ago
- Microsoft Threat Intelligence Security Tools☆2,011Sep 23, 2026Updated 2 weeks ago
- ☆21Sep 3, 2021Updated 5 years ago
- Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.☆627Oct 17, 2025Updated 11 months ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆57Mar 20, 2026Updated 6 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Powershell Based tool for gathering information related to O365 intrusions and potential Breaches☆956Jun 10, 2026Updated 4 months ago
- Microsoft Defender for Cloud attack simulation toolkit☆27Aug 24, 2026Updated last month
- Home repo for documentation and links to resources☆11Jul 25, 2019Updated 7 years ago
- ☆13Nov 10, 2020Updated 5 years ago
- Sandbox evasion code snippets developped in Golang☆20Sep 19, 2022Updated 4 years ago
- Cloud-native SIEM for intelligent security analytics for your entire enterprise.☆6,181Updated this week
- This repo provides options to use dsregcmd information in managed code and powershell not by parsing the dsregcmd.exe commandline output.…☆13Nov 1, 2024Updated last year
- A guide to using Azure Data Explorer and KQL for DFIR☆124May 16, 2022Updated 4 years ago
- command line tool to use the DNSDB Flexible Search API extensions.☆17Aug 5, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36May 11, 2026Updated 5 months ago
- KQL Detections for Microsoft Sentinel and Microsoft 365 Defender☆22Nov 15, 2024Updated last year
- AADInternals PowerShell module for administering Azure AD and Office 365☆1,702Sep 30, 2025Updated last year
- Training and support materials for MSTICPy☆17Jun 27, 2023Updated 3 years ago
- Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more☆31Sep 2, 2026Updated last month
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆83Sep 28, 2026Updated last week
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated last year
- A small CTFd plugin to send notifications about solves and admin announcements to Slack/Discord/Telegram☆13Oct 20, 2021Updated 4 years ago
- Collection of KQL queries☆1,652Jan 29, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Synapse Central Intelligence System☆454Updated this week
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆23May 9, 2025Updated last year
- Repo to hold my PowerShell Scripts☆17Oct 19, 2022Updated 3 years ago
- MCP server for incident response in AWS☆18Sep 2, 2025Updated last year
- ☆647Jun 6, 2023Updated 3 years ago
- KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunt…☆1,759Oct 4, 2026Updated last week
- ☆51Apr 4, 2026Updated 6 months ago
- ☆114Dec 9, 2025Updated 10 months ago
- IP address research and analysis. Support IPv4 and IPv6.☆12Aug 11, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Jul 29, 2020Updated 6 years ago
- Can you pay the ransom in your country?☆14Dec 18, 2023Updated 2 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 4 years ago
- PowerShell module and sample code for migrating group policies between domains or forests☆23Dec 28, 2020Updated 5 years ago
- Sophos-originated indicators-of-compromise from published reports☆672Sep 30, 2026Updated last week
- Terraform Virtual Machine Module☆15Mar 14, 2025Updated last year
- The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Produc…☆457Jun 16, 2023Updated 3 years ago