☆43May 22, 2021Updated 5 years ago
Alternatives and similar repositories for KQL_Reference_Manual
Users that are interested in KQL_Reference_Manual are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Miscellaneous Azure Sentinel files that don't fall into other categories.☆13Aug 23, 2021Updated 5 years ago
- Various tools used to monitor and troubleshoot Azure Sentinel data☆31Oct 24, 2024Updated 2 years ago
- Solution to deploy a Sentinel playground demo environment☆60Jun 9, 2023Updated 3 years ago
- Production-ready Windows 10 & 11 Exploit Protection policy aligned with Microsoft Defender and DISA STIG baselines.☆13Oct 7, 2026Updated 3 weeks ago
- ☆94Jan 10, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Guidance and collateral for troubleshooting and managing Azure Sentinel data costs.☆28Oct 9, 2023Updated 3 years ago
- Repository with Sample KQL Query examples for Threat Hunting☆218Sep 1, 2022Updated 4 years ago
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated 2 years ago
- ☆28Aug 18, 2026Updated 2 months ago
- ☆16May 19, 2026Updated 5 months ago
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 5 years ago
- ☆23Aug 29, 2023Updated 3 years ago
- Defender for Endpoint☆18Mar 11, 2024Updated 2 years ago
- Azure playbook for automatic evidence collection☆13Jul 3, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆216Jul 21, 2022Updated 4 years ago
- Sentinel BEC IR☆14Aug 18, 2022Updated 4 years ago
- CONVEX is a group of CTFs that are independently deployable into participant Azure environments.☆140May 16, 2022Updated 4 years ago
- ☆59Jul 18, 2024Updated 2 years ago
- ☆21Jan 30, 2024Updated 2 years ago
- ☆19Dec 18, 2024Updated last year
- Microsoft Sentinel Incident Tasks Recipes☆11Nov 29, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Repository to publish sample use cases, templates, solutions, automations for Microsoft Defender Threat Intelligence (MDTI) product☆82Sep 9, 2024Updated 2 years ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆44Oct 1, 2026Updated 3 weeks ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆13Jan 24, 2026Updated 9 months ago
- Additional resources to improve customer experience with Microsoft Defender for Identity☆129Oct 6, 2026Updated 3 weeks ago
- Microsoft Defender Advanced Threat Protection☆49Oct 1, 2026Updated 3 weeks ago
- Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)☆24Mar 30, 2026Updated 6 months ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆292Jan 2, 2026Updated 9 months ago
- Identify the attack paths in BloodHound breaking your AD tiering☆326Nov 6, 2022Updated 3 years ago
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Cheat sheets for threat hunting, detection and other stuff.☆35Oct 7, 2022Updated 4 years ago
- Add POST body excerpt to Bro's HTTP log☆14Dec 10, 2025Updated 10 months ago
- Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!☆21Aug 23, 2024Updated 2 years ago
- Hunting Queries for Defender ATP☆85Jul 7, 2026Updated 3 months ago
- Intune related scripts☆102May 25, 2026Updated 5 months ago
- Bulk turn on Analytic rules in Azure Sentinel☆18Oct 7, 2021Updated 5 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆12Oct 27, 2023Updated 3 years ago