☆43May 22, 2021Updated 5 years ago
Alternatives and similar repositories for KQL_Reference_Manual
Users that are interested in KQL_Reference_Manual are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Miscellaneous Azure Sentinel files that don't fall into other categories.☆13Aug 23, 2021Updated 5 years ago
- Solution to deploy a Sentinel playground demo environment☆59Jun 9, 2023Updated 3 years ago
- Production-ready Windows 10 & 11 Exploit Protection policy aligned with Microsoft Defender and DISA STIG baselines.☆13Updated this week
- Sentinel Threat Intelligence Upload Toolkit☆18Jul 15, 2024Updated 2 years ago
- Guidance and collateral for troubleshooting and managing Azure Sentinel data costs.☆28Oct 9, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆94Jan 10, 2024Updated 2 years ago
- Various tools used to monitor and troubleshoot Azure Sentinel data☆31Oct 24, 2024Updated last year
- ☆19Dec 18, 2024Updated last year
- ☆16May 19, 2026Updated 4 months ago
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 5 years ago
- Defender for Endpoint☆18Mar 11, 2024Updated 2 years ago
- ☆59Jul 18, 2024Updated 2 years ago
- Sentinel BEC IR☆14Aug 18, 2022Updated 4 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- ☆21Jan 30, 2024Updated 2 years ago
- Additional resources to improve customer experience with Microsoft Defender for Identity☆128Updated this week
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆13Jan 24, 2026Updated 8 months ago
- The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel☆291Jan 2, 2026Updated 9 months ago
- ☆17Jul 13, 2022Updated 4 years ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- Repository with Sample KQL Query examples for Threat Hunting☆218Sep 1, 2022Updated 4 years ago
- Microsoft Defender Advanced Threat Protection☆49Oct 1, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)☆24Mar 30, 2026Updated 6 months ago
- Bulk turn on Analytic rules in Azure Sentinel☆18Oct 7, 2021Updated 5 years ago
- Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!☆21Aug 23, 2024Updated 2 years ago
- Contains the source code for Shieldchecker.☆16Jul 17, 2026Updated 2 months ago
- Intune related scripts☆101May 25, 2026Updated 4 months ago
- Repository to publish sample use cases, templates, solutions, automations for Microsoft Defender Threat Intelligence (MDTI) product☆82Sep 9, 2024Updated 2 years ago
- Add POST body excerpt to Bro's HTTP log☆14Dec 10, 2025Updated 10 months ago
- CONVEX is a group of CTFs that are independently deployable into participant Azure environments.☆139May 16, 2022Updated 4 years ago
- Azure Sentinel KQL☆478Jul 28, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Extensible Azure Security Tool - Documentation☆83Jun 1, 2023Updated 3 years ago
- ☆12Oct 24, 2022Updated 3 years ago
- A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cybe…☆18Dec 28, 2025Updated 9 months ago
- Defense in Depth CA Policies☆40Updated this week
- An introduction to Active Directory security☆647Aug 22, 2022Updated 4 years ago
- Identify the attack paths in BloodHound breaking your AD tiering☆325Nov 6, 2022Updated 3 years ago
- Easy discovery of assets☆13Jun 22, 2022Updated 4 years ago