PowerShell-based Automation of Defender for Endpoint
☆198Jul 3, 2025Updated last year
Alternatives and similar repositories for MDEAutomator
Users that are interested in MDEAutomator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …☆108Sep 12, 2026Updated last week
- Velociraptor Server hosted in Azure App Service☆60Jun 4, 2025Updated last year
- sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Lo…☆21May 20, 2025Updated last year
- Block abused TLDs in Tenant Allow BlockList☆16Sep 10, 2026Updated 2 weeks ago
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆68Mar 30, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MDE Tester is designed to help testing various features in Microsoft Defender for Endpoint.☆194Feb 20, 2026Updated 7 months ago
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆39Oct 30, 2024Updated last year
- Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)☆328Updated this week
- KQL Queries. Microsoft Defender, Microsoft Sentinel☆932Updated this week
- ☆84Feb 4, 2026Updated 7 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 5 months ago
- An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bice…☆75Updated this week
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆677Jul 6, 2026Updated 2 months ago
- EasyPIM let you manage PIM Azure Resource, Entra Role and Groups settings and assignments with simplicity☆235Apr 12, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆44Sep 5, 2025Updated last year
- Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permiss…☆147Sep 17, 2026Updated last week
- Show PIM role to solve a task - and group to activate the needed permission☆15May 22, 2025Updated last year
- An Azure SPN access minimizer☆49Jan 15, 2026Updated 8 months ago
- ☆441Updated this week
- Lightweight security tool for auditing your organization's Conditional Access Policies (CAPs) in Microsoft Entra ID for potential misconf…☆80Feb 25, 2025Updated last year
- Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.☆247Updated this week
- MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testin…☆23Oct 8, 2025Updated 11 months ago
- MacOS forensic collector for Velociraptor. 70 artefacts covering browsers, communications, user activity, persistence, security, logs, fi…☆17May 26, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repository will be publicly available☆24Jan 27, 2026Updated 7 months ago
- ☆71Apr 20, 2026Updated 5 months ago
- ☆45Apr 10, 2024Updated 2 years ago
- ☆37Mar 2, 2026Updated 6 months ago
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆54Jul 27, 2026Updated last month
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆89Updated this week
- Microsoft Active Directory (AD) Awesome List☆33Sep 7, 2026Updated 2 weeks ago
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆797Jun 3, 2026Updated 3 months ago
- Sharing my KQL queries for Azure Sentinel☆225Aug 4, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- MAES: M365 Analyzer & Extractor Suite Po☆36Aug 8, 2026Updated last month
- PowerShell Module to find compatible FIDO2 keys for Entra☆20Updated this week
- OID-See is an identity attack surface mapping tool that models OAuth trust, persistence, and impersonation paths in Entra using a graph-b…☆38Jul 25, 2026Updated last month
- ☆15Feb 12, 2026Updated 7 months ago
- Copilot for Security Tools☆19Apr 19, 2024Updated 2 years ago
- ☆49Jul 15, 2026Updated 2 months ago
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆31Feb 22, 2025Updated last year