A WDAC configuration repository with the sole intention of enriching MDE
☆30Jun 18, 2025Updated last year
Alternatives and similar repositories for WDACme
Users that are interested in WDACme are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Random Powershell scripts☆13Feb 13, 2024Updated 2 years ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- MDE relies on some of the Audit settings to be enabled☆101Jul 15, 2022Updated 4 years ago
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- ☆20May 30, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Manage and maintain Defender XDR custom collection configuration☆39Nov 19, 2025Updated 9 months ago
- ☆12Oct 24, 2022Updated 3 years ago
- FIles and guides related to using Elasticstack as a SIEM☆12May 16, 2020Updated 6 years ago
- ☆21Feb 10, 2021Updated 5 years ago
- Defender XDR Advanced Hunting Queries (MDE, MDAV, Device Discovery)☆13Aug 20, 2026Updated 2 weeks ago
- Uses Evergreen to query for application version updates and store the result in JSON☆14Updated this week
- KQL for Azure Resource Manager and AppID search☆23Aug 15, 2024Updated 2 years ago
- Simplifies the implementation of Just Enough Administration by providing functions to convert Code, ScriptBlocks or Scripts into JEA role…☆32May 7, 2025Updated last year
- MS Entra ID Protection Guidance☆22Apr 2, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 7 years ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- ☆24Jun 4, 2025Updated last year
- REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.☆54Jul 27, 2026Updated last month
- This repository is used by FalconForce to release parts of the internal tools used for maintaining, validating and automatically deployin…☆17Mar 10, 2023Updated 3 years ago
- Sentinel Analytics Rule converter PowerShell module☆71Feb 24, 2026Updated 6 months ago
- This repo contains a list of vendors that hide their security advisories, alerts, notices, vulnerabilities, and more behind either a payw…☆32May 11, 2024Updated 2 years ago
- 🔎 OCR CLI that outputs structured data with bounding rects using local Windows OCR API☆16Apr 11, 2026Updated 4 months ago
- You wonder how to manage your travelers ? In this scenario we describe how to manage them with Identity Governance and Conditional Access…☆11Mar 20, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆24Mar 25, 2025Updated last year
- A collection of scripts and works related to Azure Sentinel☆42Jul 9, 2022Updated 4 years ago
- Documentation and tools to access Windows Defender Application Control (WDAC) technology.☆280Aug 19, 2026Updated 2 weeks ago
- Splunk Searches and Dashboards for DNS Threat Hunting☆11Mar 5, 2018Updated 8 years ago
- IntuneFirewallMigration is an updated version of the originally Microsoft provided tool to capture firewall rules from a target machine a…☆27Jul 1, 2026Updated 2 months ago
- CA Optics - Azure AD Conditional Access Gap Analyzer☆337Aug 28, 2024Updated 2 years ago
- Harden Windows with Windows Defender Application Control (WDAC)☆52Jul 26, 2024Updated 2 years ago
- Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.☆132Feb 10, 2026Updated 6 months ago
- Microsoft Defender Advanced Threat Protection☆49Jan 28, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆78Aug 5, 2024Updated 2 years ago
- ☆13May 30, 2025Updated last year
- Repository for the Microsoft Identity Tools PowerShell module which provides various tools for performing enhanced Identity administratio…☆300Nov 18, 2025Updated 9 months ago
- ☆107Jul 5, 2025Updated last year
- ☆44Oct 11, 2023Updated 2 years ago
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 4 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into SQL DB☆30Nov 21, 2025Updated 9 months ago