The SOC Entity Triage workbook is designed to enhance the triage process for security operation centers (SOCs) by providing a comprehensive and interactive analysis tool within Azure Sentinel. This workbook aims to streamline the investigation of entities such as IP addresses, hostnames, AD users, and email accounts,.
☆10Mar 19, 2024Updated 2 years ago
Alternatives and similar repositories for SOCEntityTriageWorkbook
Users that are interested in SOCEntityTriageWorkbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repo for Automations and other solutions for Elastic SIEM/Security.☆19Jun 15, 2021Updated 5 years ago
- Integration tools for TheHive and Azure Sentinel☆13Sep 23, 2020Updated 6 years ago
- Ingesting Shodan Monitor Alerts to Microsoft Sentinel☆33Sep 19, 2023Updated 3 years ago
- Microsoft Graph Training Module - Create a Microsoft Graph JSON Batch Custom Connector for Microsoft Power Automate & Azure Logic Apps☆32May 17, 2024Updated 2 years ago
- Prometheus exporter for Aruba switches, instant APs and controllers☆13Jan 18, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- KQL Sentinel and Defender Detection and Hunting Queries.☆16Aug 17, 2026Updated 2 months ago
- various tools for Microsoft Sentinel☆32Jun 17, 2026Updated 4 months ago
- Jinja2 plugins for nornir☆10Oct 26, 2026Updated last week
- Elastic Ingest Documentation☆16Updated this week
- Infrastucture-as-Code in Reverse☆11Oct 2, 2019Updated 7 years ago
- CI/CD repository template to automate deployments of your production flows☆15Jul 1, 2024Updated 2 years ago
- Collection of Azure Monitor or Sentinel Kusto Queries☆11Aug 17, 2022Updated 4 years ago
- Node CLI tool to import a CSV into ClearPass via the RESTful API☆14Feb 11, 2026Updated 8 months ago
- Automatically generated Sysmon parser for Azure Sentinel☆18Jan 6, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, sever…☆16Oct 3, 2026Updated last month
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆38Mar 25, 2024Updated 2 years ago
- Flowpipe sample mods, demonstrating common pipeline patterns and how to use the Flowpipe library mods. Run directly or use as examples fo…☆19Apr 27, 2026Updated 6 months ago
- Completed project for Build TypeScript apps with Microsoft Graph☆18Oct 27, 2026Updated last week
- Extending Ansible, the dmidecode module for ansible collects system information such as BIOS specs, Processor specs and System specs and …☆16Dec 31, 2015Updated 10 years ago
- Demo for how to build a network analysis stack with Nornir, NAPALM and Pandas☆18Jul 3, 2023Updated 3 years ago
- Azure OpenAI Playbook created for Microsoft Sentinel☆14May 2, 2024Updated 2 years ago
- putting all together: customer environment, some threats, azure security services, Microsoft 365 Defender services, Azure monitor service…☆18Apr 11, 2022Updated 4 years ago
- Ansible Network Juniper JUNOS Provider Role☆18Apr 4, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Detection rules and threat hunting queries in Defender XDR and Azure Sentinel☆17Mar 13, 2026Updated 7 months ago
- Azure-Sentinel-BYOML☆14Nov 8, 2019Updated 6 years ago
- Microsoft Sentinel Incident Tasks Recipes☆11Nov 29, 2022Updated 3 years ago
- Sentinel Recon Tools Workbook☆14Aug 24, 2022Updated 4 years ago
- ☆11Mar 16, 2023Updated 3 years ago
- NAPALM driver for ArubaOS-Switch☆17Mar 27, 2024Updated 2 years ago
- This repository contains workflows using the AOS-CX Ansible Collection.☆18Apr 1, 2026Updated 7 months ago
- Online Reverse Enginerring viewer☆15Jul 31, 2026Updated 3 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆17Jun 19, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Bulk turn on Analytic rules in Azure Sentinel☆18Oct 7, 2021Updated 5 years ago
- ☆14Feb 22, 2021Updated 5 years ago
- Miscellaneous notebooks to use with Sentinel Hub☆20Aug 28, 2023Updated 3 years ago
- Azure Sentinel Template parser☆16Nov 2, 2020Updated 6 years ago
- Azure Function for the Microsoft Sentinel Triage AssistanT (STAT)☆16Aug 21, 2026Updated 2 months ago
- Miscellaneous Azure Sentinel files that don't fall into other categories.☆12Aug 23, 2021Updated 5 years ago
- Essential playbooks & runbooks for cybersecurity operations. A dynamic resource for security pros to navigate digital threats, with best …☆20Jun 23, 2026Updated 4 months ago