☆43May 22, 2021Updated 5 years ago
Alternatives and similar repositories for KQL_Reference_Manual
Users that are interested in KQL_Reference_Manual are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Miscellaneous Azure Sentinel files that don't fall into other categories.☆13Aug 23, 2021Updated 5 years ago
- Solution to deploy a Sentinel playground demo environment☆59Jun 9, 2023Updated 3 years ago
- ☆13May 30, 2025Updated last year
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated 2 years ago
- Guidance and collateral for troubleshooting and managing Azure Sentinel data costs.☆28Oct 9, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆94Jan 10, 2024Updated 2 years ago
- Various tools used to monitor and troubleshoot Azure Sentinel data☆31Oct 24, 2024Updated last year
- ☆19Dec 18, 2024Updated last year
- ☆16May 19, 2026Updated 4 months ago
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 5 years ago
- Defender for Endpoint☆18Mar 11, 2024Updated 2 years ago
- ☆60Jul 18, 2024Updated 2 years ago
- Sentinel BEC IR☆14Aug 18, 2022Updated 4 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- ☆21Jan 30, 2024Updated 2 years ago
- Additional resources to improve customer experience with Microsoft Defender for Identity☆128Sep 10, 2026Updated last week
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆13Jan 24, 2026Updated 7 months ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆291Jan 2, 2026Updated 8 months ago
- ☆18Jul 13, 2022Updated 4 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- Repository with Sample KQL Query examples for Threat Hunting☆219Sep 1, 2022Updated 4 years ago
- Microsoft Defender Advanced Threat Protection☆49Jan 28, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)☆24Mar 30, 2026Updated 5 months ago
- Bulk turn on Analytic rules in Azure Sentinel☆18Oct 7, 2021Updated 4 years ago
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 2 months ago
- Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!☆21Aug 23, 2024Updated 2 years ago
- Intune related scripts☆98May 25, 2026Updated 3 months ago
- Repository to publish sample use cases, templates, solutions, automations for Microsoft Defender Threat Intelligence (MDTI) product☆82Sep 9, 2024Updated 2 years ago
- Add POST body excerpt to Bro's HTTP log☆14Dec 10, 2025Updated 9 months ago
- CONVEX is a group of CTFs that are independently deployable into participant Azure environments.☆140May 16, 2022Updated 4 years ago
- Azure Sentinel KQL☆478Jul 28, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆216Jul 21, 2022Updated 4 years ago
- Extensible Azure Security Tool - Documentation☆84Jun 1, 2023Updated 3 years ago
- ☆12Oct 24, 2022Updated 3 years ago
- A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cybe…☆18Dec 28, 2025Updated 8 months ago
- Defense in Depth CA Policies☆39Sep 3, 2026Updated 2 weeks ago
- An introduction to Active Directory security☆648Aug 22, 2022Updated 4 years ago
- Identify the attack paths in BloodHound breaking your AD tiering☆326Nov 6, 2022Updated 3 years ago