tenable / integration-asc
☆10Updated 8 months ago
Related projects ⓘ
Alternatives and complementary repositories for integration-asc
- A collection of scripts and works related to Azure Sentinel☆41Updated 2 years ago
- M365 MDATP Live Response sample scripts☆62Updated 3 weeks ago
- Microsoft Threat Protection Advance Hunting Cheat Sheet☆78Updated 4 years ago
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆38Updated 4 years ago
- ☆58Updated last year
- Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring☆117Updated 4 years ago
- Find accounts using common and default passwords in Active Directory.☆65Updated 5 years ago
- Advanced Hunting Queries for Microsoft Security Products☆106Updated last year
- Elastic Beat for fetching and shipping Office 365 audit events☆66Updated 4 years ago
- Collection of resources related to the Center for Threat-Informed Defense☆77Updated 6 months ago
- ☆149Updated 3 years ago
- Reworked assets for Azure Sentinel using Cisco Umbrella logs as source. Includes logstash config for Cisco Umbrella using Cisco managed A…☆13Updated 4 years ago
- ☆29Updated last week
- Personal repo for messing with scripts☆25Updated 3 years ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆162Updated 5 years ago
- Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…☆213Updated 2 years ago
- Windows Defender ATP - Advanced Hunting Queries☆21Updated 6 years ago
- Powershell module for Microsoft Cloud App Security☆85Updated last year
- Michael Melone's Kusto Query library☆18Updated last year
- Powering Up Incident Response with Power-Response☆62Updated 4 years ago
- ☆13Updated 3 years ago
- Zerofox Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform☆36Updated 4 years ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆60Updated 11 months ago
- Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides☆159Updated 4 years ago
- Solution to deploy a Sentinel playground demo environment☆55Updated last year