ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.
☆39Oct 30, 2024Updated 2 years ago
Alternatives and similar repositories for ADXFlowmaster
Users that are interested in ADXFlowmaster are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆23Aug 29, 2023Updated 3 years ago
- This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365…☆67May 12, 2024Updated 2 years ago
- various tools for Microsoft Sentinel☆32Jun 17, 2026Updated 4 months ago
- Velociraptor Server hosted in Azure App Service☆59Jun 4, 2025Updated last year
- ☆14Jul 16, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PowerShell-based Automation of Defender for Endpoint☆197Jul 3, 2025Updated last year
- ☆12Nov 10, 2020Updated 5 years ago
- ☆36Mar 23, 2024Updated 2 years ago
- ☆46Apr 10, 2024Updated 2 years ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆56Sep 29, 2026Updated last month
- ☆29May 1, 2025Updated last year
- Random Powershell scripts☆13Feb 13, 2024Updated 2 years ago
- Interactive map of OAuth, Conditional Access, Entra Agent ID and MCP authentication flows, step by step☆68Updated this week
- AzureLogLibrary - repository used for Azure logging with ARM-templates, scripts, documentation to deploy DCRs, extensions, etc☆14Aug 11, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (…☆143Oct 22, 2026Updated last week
- ☆37Mar 2, 2026Updated 8 months ago
- ☆57Aug 13, 2026Updated 2 months ago
- A platform for extracting and shipping security value from your data lake to Sentinel.☆36Sep 19, 2024Updated 2 years ago
- Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.☆491Nov 22, 2024Updated last year
- A new way for you to structure your threat content.☆11Oct 24, 2024Updated 2 years ago
- Sentinel BEC IR☆14Aug 18, 2022Updated 4 years ago
- BlackCat is a PowerShell module designed to validate the security of Microsoft Azure. It provides a set of functions to identify potentia…☆206Oct 26, 2026Updated last week
- Tool for creating reports on Entra ID Role Assignments☆100Apr 12, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hunting Queries for Defender ATP☆85Jul 7, 2026Updated 3 months ago
- ☆10Nov 3, 2025Updated 11 months ago
- AI-powered bookmark management for Raindrop.io - works with Claude Code, Codex, Amp, OpenCode☆17Jan 4, 2026Updated 9 months ago
- My Azure Sentinel Ninja ideas, thoughts and contributions☆26Sep 9, 2026Updated last month
- Queries from the blog posts.☆15Oct 6, 2024Updated 2 years ago
- ☆19Dec 18, 2024Updated last year
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- ☆12Oct 24, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆14Oct 25, 2026Updated last week
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated 2 years ago
- Decrypts and extracts tokens from TokenBroker cache files in Windows☆14May 20, 2025Updated last year
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆802Updated this week
- MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts from an external perspective. It emp…☆79Apr 7, 2026Updated 6 months ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆13Jan 24, 2026Updated 9 months ago
- ☆86Feb 4, 2026Updated 8 months ago