Microsoft Threat Intelligence
☆217Oct 22, 2026Updated last week
Alternatives and similar repositories for mstic
Users that are interested in mstic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MSTIC Notebook Components☆36Jul 8, 2026Updated 3 months ago
- Microsoft Threat Intelligence Security Tools☆2,018Oct 19, 2026Updated last week
- ☆21Sep 3, 2021Updated 5 years ago
- This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.☆20Updated this week
- ☆114Dec 9, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- KQL Detections for Microsoft Sentinel and Microsoft 365 Defender☆22Nov 15, 2024Updated last year
- This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…☆969Updated this week
- Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.☆628Oct 17, 2025Updated last year
- sample code to MicrosoftDefenderATP API☆27Apr 5, 2021Updated 5 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆54Jul 20, 2023Updated 3 years ago
- Home repo for documentation and links to resources☆12Jul 25, 2019Updated 7 years ago
- Cloud-native SIEM for intelligent security analytics for your entire enterprise.☆6,231Updated this week
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆21May 20, 2025Updated last year
- Powershell Based tool for gathering information related to O365 intrusions and potential Breaches☆960Jun 10, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Microsoft Defender for Cloud attack simulation toolkit☆27Oct 22, 2026Updated last week
- This project contains samples how to use MDATP API for integration with other systems and products☆30Dec 22, 2019Updated 6 years ago
- A sample about how to use the Azure Data Catalog REST API to fetch information from the Azure Data Catalog and how to register items with…☆10Nov 30, 2018Updated 7 years ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆57Updated this week
- ☆647Jun 6, 2023Updated 3 years ago
- Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more☆32Sep 2, 2026Updated last month
- ☆13Nov 10, 2020Updated 5 years ago
- The Open Insurance Initiative☆11Aug 28, 2020Updated 6 years ago
- AADInternals PowerShell module for administering Azure AD and Office 365☆1,705Sep 30, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A guide to using Azure Data Explorer and KQL for DFIR☆126May 16, 2022Updated 4 years ago
- Synapse Central Intelligence System☆456Updated this week
- A resilient, rate-limit aware GitHub API client.☆16Sep 22, 2022Updated 4 years ago
- A simple C#/.NET chat application that uses managed identity for Azure OpenAI access. Designed for deployment on Azure Container Apps wit…☆12Oct 21, 2024Updated 2 years ago
- Collection of KQL queries☆1,660Jan 29, 2026Updated 9 months ago
- This repo provides options to use dsregcmd information in managed code and powershell not by parsing the dsregcmd.exe commandline output.…☆13Nov 1, 2024Updated last year
- Script that uses exiftool and c2pa to identify metadata tags that indicate AI generation☆15Dec 27, 2025Updated 10 months ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated last month
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆83Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- command line tool to use the DNSDB Flexible Search API extensions.☆17Aug 5, 2024Updated 2 years ago
- KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunt…☆1,764Oct 13, 2026Updated 2 weeks ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆13Jan 24, 2026Updated 9 months ago
- Android App(of Wake Your PC project) to trigger the wakeup of the desktop from sleep☆13Jun 12, 2023Updated 3 years ago
- A satisfiability solver for (existential) bit-vector formulas based on the mcSAT framework.☆23Jun 13, 2023Updated 3 years ago
- Additional resources to improve customer experience with Microsoft Defender for Identity☆129Oct 6, 2026Updated 3 weeks ago
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Updated this week