Alternatives and similar repositories for Sentinel-template-parser:

Users that are interested in Sentinel-template-parser are comparing it to the libraries listed below

• swisscom / PowerSponse
  PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
  ☆38Updated 2 years ago
• humio / security_monitoring
  ☆41Updated last year
• ajackal / ir_scripts
  incident response scripts
  ☆19Updated 5 years ago
• maartengoet / notebooks
  Jupyter notebooks
  ☆23Updated 4 years ago
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆52Updated 2 years ago
• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆28Updated 2 years ago
• jokezone / Update-Sysmon
  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.
  ☆82Updated last year
• Jrotenberger / Powershell-IR-Scripts
  ☆39Updated 5 years ago
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆72Updated 4 months ago
• CompassSecurity / Readinizer
  Microsoft GPO Readiness Lateral Movement Detection Tool
  ☆16Updated 2 years ago
• miladaslaner / AdvHuntingCheatSheet
  Microsoft Threat Protection Advance Hunting Cheat Sheet
  ☆79Updated 4 years ago
• zulu8 / Get-Baseline
  PowerShell Script for Agentless Incident Response
  ☆25Updated 6 years ago
• AtomicGaryBusey / AzureForensics
  ☆30Updated 3 years ago
• philhagen / for572-scripts
  A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis
  ☆26Updated 2 months ago
• inodee / spl-to-kql
  The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…
  ☆39Updated 4 years ago
• Cyb3rWard0g / azure-loganalytics-api-clients
  A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…
  ☆23Updated last year
• gmellini / Microsoft-Defender-Security-Center-Hunting-Queries
  Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…
  ☆39Updated 3 years ago
• johnfranolich / Hunting-Scripts
  A collection of hunting and blue team scripts. Mostly others, some my own.
  ☆38Updated 2 years ago
• nettitude / defensive-scripts
  Defence Against the Dark Arts
  ☆34Updated 5 years ago
• 00010111 / smbtimeline
  ☆33Updated 4 months ago
• pfpt-andrew / Rapid-Response-Reporting
  RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…
  ☆36Updated 2 years ago
• theaj42 / presentations
  ☆15Updated 2 years ago
• dmb2168 / o365-appids
  ☆21Updated 4 years ago
• counteractive / incident-response-collector
  ☆15Updated 4 years ago
• FalconForceTeam / KQLAnalyzer
  REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.
  ☆32Updated last month
• iknowjason / Velociraptor_Azure
  A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.
  ☆20Updated 3 years ago
• PwC-IR / MIA-MailItemsAccessed-
  Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…
  ☆39Updated 4 years ago
• dwmetz / PSHero
  PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.
  ☆36Updated last year
• guardsight / gsvsoc_mission-model
  Incident Response Report Using GitHub-Sphinx
  ☆20Updated 5 years ago
• mgreen27 / Invoke-BitsParser
  Sharing my BITS
  ☆13Updated 7 years ago