Alternatives and similar repositories for KQL_Intune:

Users that are interested in KQL_Intune are comparing it to the libraries listed below

• mattnovitsch / M365
  ☆54Updated last month
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆100Updated 3 months ago
• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆66Updated 2 years ago
• msdirtbag / mde
  Defender for Endpoint
  ☆17Updated 11 months ago
• Cyberlorians / Articles
  ☆51Updated 2 weeks ago
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆104Updated last year
• ugurkocde / IntuneDeviceQuery
  This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.
  ☆83Updated 2 months ago
• ThomasVrhydn / MDE-troubleshooter
  This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …
  ☆54Updated 2 weeks ago
• j0eyv / ConditionalAccessBaseline
  ☆110Updated this week
• nathanmcnulty / nathanmcnulty
  ☆223Updated this week
• msgraph / powershell
  Share your own Graph PowerShell samples in the Discussions tab.
  ☆79Updated last year
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆43Updated 4 months ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆66Updated 3 months ago
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆144Updated 2 months ago
• kennethvs / cabaseline202212
  Conditional Access Baseline - December 2022
  ☆86Updated last year
• dougsbaker / CA-Export
  ☆22Updated last week
• alexverboon / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆135Updated 2 weeks ago
• eneerge / CIS-Microsoft-Intune-For-Windows-IntuneProfile
  ☆43Updated 5 months ago
• aollivierre / ConditionalAccess
  This repository contains a comprehensive set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID (…
  ☆78Updated last month
• rod-trent / SentinelWorkbooks
  Workbooks for Azure Sentinel
  ☆58Updated last year
• ManagedSentinel / AzureSentinelKQLScripts
  Various tools used to monitor and troubleshoot Azure Sentinel data
  ☆30Updated 3 months ago
• LouisMastelinck / Monitor-security-policy-changes-or-admin-activities
  ☆18Updated last year
• michaelmsonne / ManagedIdentityPermissionManager
  Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permiss…
  ☆59Updated 2 weeks ago
• Cloud-Architekt / AzurePrivilegedIAM
  Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.
  ☆145Updated 2 weeks ago
• nicolonsky / ConditionalAccessDocumentation
  Azure AD Conditional Access Documentation with PowerShell
  ☆145Updated 9 months ago
• PuravsPoint / DecipheringUAL
  This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365…
  ☆56Updated 9 months ago
• Cloud-Architekt / AzureSentinel
  Sharing my KQL queries for Azure Sentinel
  ☆152Updated 2 weeks ago
• dmrellan / Visual-Auditing-Security-Workbook-with-Microsoft-Sentinel
  ☆32Updated last year
• microsoft / mdefordownlevelserver
  ☆75Updated last year