microsoft / msticnb
MSTIC Notebook Components
☆29Updated last month
Related projects: ⓘ
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆57Updated last year
- A lab environment for learning about MSTICPy☆36Updated last year
- Jupyter notebooks☆22Updated 4 years ago
- A community event for security researchers to share their favorite notebooks☆105Updated 7 months ago
- The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…☆35Updated 3 years ago
- Cloud Templates and scripts to deploy mordor environments☆127Updated 3 years ago
- Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…☆35Updated 3 years ago
- Collection of resources related to the Center for Threat-Informed Defense☆77Updated 3 months ago
- Microsoft Threat Protection Advance Hunting Cheat Sheet☆76Updated 4 years ago
- Provides detection capabilities and log conversion to evtx or syslog capabilities☆51Updated 2 years ago
- Azure Sentinel Template parser☆15Updated 3 years ago
- ☆17Updated 3 years ago
- MITRE Shield website☆18Updated 2 years ago
- ☆68Updated last year
- A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…☆23Updated last year
- Detection of obfuscated Powershell commands☆53Updated last year
- ☆28Updated last year
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated last year
- ☆29Updated 2 years ago
- Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.☆57Updated 4 years ago
- Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity☆86Updated 2 years ago
- List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by develop…☆22Updated 3 years ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆108Updated 3 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆20Updated 3 years ago
- ☆25Updated 2 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆73Updated 2 months ago
- Use Terraform to Provision Your Own Cloud-Based Remote Browsing Workstation☆24Updated 4 months ago
- Azure function to insert MISP data in to Azure Sentinel☆30Updated last year
- ☆17Updated 2 years ago
- OSSEM Data Dictionaries☆56Updated last month