A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.
☆36May 6, 2026Updated 2 months ago
Alternatives and similar repositories for defender-xdr-advanced-hunting
Users that are interested in defender-xdr-advanced-hunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Microsoft Sentinel toolkit for generating and ingesting **realistic sample data** into Log Analytics tables via the Azure Monitor Logs …☆20Jun 8, 2026Updated last month
- Share Information about Microsoft Security Products☆108Updated this week
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated 11 months ago
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆66Mar 30, 2026Updated 3 months ago
- ☆85Jun 12, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆22Feb 14, 2026Updated 5 months ago
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆17May 13, 2026Updated 2 months ago
- A Triage Agent for reducing junior analyst manual activiites☆42May 11, 2026Updated 2 months ago
- Collection of Microsoft Identity Threat Detection and Response resources.☆54Jul 1, 2026Updated last week
- Microsoft Sentinel SIEM Log Source Analyzer☆28Jun 10, 2026Updated last month
- A curated list of Ransomware resources☆41May 11, 2026Updated 2 months ago
- KQL Sentinel and Defender Detection and Hunting Queries.☆16Updated this week
- Advanced Threat Hunting: Ransomware Group☆28Jul 9, 2025Updated last year
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Miscellaneous stuff I create☆74Apr 21, 2026Updated 2 months ago
- ResearchDev - XDR & SIEM Detection☆66Apr 16, 2025Updated last year
- Guidance and collateral for troubleshooting and managing Azure Sentinel data costs.☆28Oct 9, 2023Updated 2 years ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆122Jan 18, 2026Updated 5 months ago
- First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extract…☆30May 21, 2026Updated last month
- KQL example queries for working in Azure☆38Dec 1, 2025Updated 7 months ago
- AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK☆227Mar 4, 2026Updated 4 months ago
- An AI-powered plugin for Caldera that orchestrates long-running LLM workflows to automatically create adversary emulation abilities and p…☆36May 6, 2026Updated 2 months ago
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆20May 20, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MIT…☆117Updated this week
- File type examples, useful for security testing.☆17Jun 6, 2026Updated last month
- ☆21Jul 16, 2025Updated 11 months ago
- Ian Hanley's deceptively simple KQL queries.☆68Apr 10, 2026Updated 3 months ago
- Content Repo for Demystifying KQL Tutorial Series☆74Sep 1, 2024Updated last year
- Automatic Microsoft Sentinel Deployment☆16Apr 1, 2025Updated last year
- ☆88Nov 14, 2025Updated 8 months ago
- Defender Resource Hub☆32Jul 1, 2026Updated last week
- Sharing my KQL queries for Azure Sentinel☆224Jun 13, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Entra ID user enumeration and auth method discovery via the public GetCredentialType API☆156Updated this week
- A WDAC configuration repository with the sole intention of enriching MDE☆30Jun 18, 2025Updated last year
- KQL Queries☆42Jun 30, 2026Updated 2 weeks ago
- Passive OSINT engine: one seed domain → full infrastructure cluster. Automates Ryan McDonald's scam-kit fingerprinting methodology. crt.s…☆17May 25, 2026Updated last month
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated 5 months ago
- The Azure Hyper-V Lab makes virtualization on Azure effortless, perfect for experimenting, learning, and building proof-of-concepts.☆15May 17, 2025Updated last year
- KQL queries for cyber defense and for solving daily issues☆55Jul 28, 2025Updated 11 months ago