A Triage Agent for reducing junior analyst manual activiites
☆48May 11, 2026Updated 5 months ago
Alternatives and similar repositories for SIEMTriage
Users that are interested in SIEMTriage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MCP server for incident response in AWS☆18Sep 2, 2025Updated last year
- Share Information about Microsoft Security Products☆154Updated this week
- Miscellaneous stuff I create☆76Updated this week
- MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable inte…☆18Jun 19, 2026Updated 4 months ago
- SOCAutomators Substack blog companion — threat research, DBIR analysis, and security operations content☆21Jun 3, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot☆176Jun 18, 2026Updated 4 months ago
- Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.☆396Updated this week
- A schema-aware dataset and Claude AI skill for Microsoft Defender XDR Advanced Hunting.☆36May 6, 2026Updated 5 months ago
- A Model Context Protocol (MCP) server that provides tools for working with the MITRE ATT&CK framework using the mitreattack-python librar…☆15Oct 9, 2026Updated 2 weeks ago
- A Microsoft Sentinel toolkit for generating and ingesting **realistic sample data** into Log Analytics tables via the Azure Monitor Logs …☆20Oct 1, 2026Updated 3 weeks ago
- PowerShell tool for streamlined Microsoft Defender Advanced Hunting query management with GitHub Copilot integration☆21Aug 31, 2026Updated last month
- An automation framework for deploying Microsoft Sentinel environments using pipelines. This project combines infrastructure-as-code (Bice…☆78Updated this week
- This project contains a **test executable** specifically designed to trigger incidents in **Microsoft Defender for Endpoint (MDE)**. It…☆14Jul 20, 2025Updated last year
- Rethink Secure Score: risk-based scoring across Defender XDR, Entra, AD, Azure, ExposureGraph, and Shodan — weighted by consequence, Tier…☆45Aug 27, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- MCP to help Defenders Detection Engineer Harder and Smarter☆498Jun 16, 2026Updated 4 months ago
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Oct 7, 2026Updated 2 weeks ago
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆124Jan 18, 2026Updated 9 months ago
- KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Micro…☆159Apr 1, 2026Updated 6 months ago
- ClientInspectorV2 - Unleashing the power of Azure LogAnalytics, Azure Data Collection Rules, Log Ingestion API by doing client inventory …☆27Apr 28, 2023Updated 3 years ago
- This project is a sophisticated **Model Context Protocol (MCP) server** for Microsoft Graph Security API Incident and Alert management☆15Jun 9, 2025Updated last year
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 3 months ago
- IntuneAutomate - FREE Community Intune toolset designed for Automating key Intune tasks☆25Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automated security investigation tool using Microsoft MCP Servers, GitHub Copilot, Python Modules and custom copilot-instructions.☆250Oct 8, 2026Updated 2 weeks ago
- Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents☆56Apr 25, 2024Updated 2 years ago
- InSpec profile to validate an M365 account to the standards of the CIS Microsoft 365 Foundations Benchmark.☆17Dec 14, 2025Updated 10 months ago
- ☆70Apr 20, 2026Updated 6 months ago
- Lateral Movement and Data Access artifacts for Velociraptor☆17Dec 2, 2025Updated 10 months ago
- Azure Function for the Microsoft Sentinel Triage AssistanT (STAT)☆16Aug 21, 2026Updated 2 months ago
- Nova Rules Collection - Official rules for Nova Framework prompt pattern matching☆20Sep 21, 2026Updated last month
- IR drill plateform☆24Jul 29, 2025Updated last year
- The entire knowledge around the detection lifecycle, encoded into skills. More details at https://detectionskills.io/☆55Oct 14, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- GraphEssentials is a PowerShell module that helps with Office 365 / Azure AD using mostly Graph☆13Oct 9, 2026Updated 2 weeks ago
- Self-hosted MDM for Linux fleets. Enrollment, profiles, disk encryption, lock and wipe, OS updates and remote assistance with each distri…☆20Updated this week
- ☆122May 26, 2025Updated last year
- A skill to help cybersecurity folks update and tweak their resume☆185Sep 20, 2026Updated last month
- ICS attack simulator for the Tennessee Eastman Process. From the NDSS 2024 paper: "Attributions for ML-based ICS anomaly detection: From …☆18Aug 31, 2023Updated 3 years ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆291Jan 2, 2026Updated 9 months ago
- A cutting-edge PHP 7.4+ webshell designed for advanced penetration testing.☆30Oct 15, 2026Updated last week