Alternatives and similar repositories for KQL_Intune

Users that are interested in KQL_Intune are comparing it to the libraries listed below

• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆66Updated 2 years ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆110Updated 2 weeks ago
• mattnovitsch / M365
  ☆55Updated last month
• ThomasVrhydn / MDE-troubleshooter
  This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …
  ☆67Updated last month
• msdirtbag / mde
  Defender for Endpoint
  ☆17Updated last year
• dougsbaker / CA-Export
  ☆39Updated last month
• Cyberlorians / Articles
  ☆52Updated last week
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆162Updated 3 weeks ago
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆105Updated last year
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆44Updated last month
• rod-trent / SentinelWorkbooks
  Workbooks for Azure Sentinel
  ☆59Updated last year
• ugurkocde / IntuneDeviceQuery
  This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.
  ☆104Updated 3 months ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆74Updated 7 months ago
• msgraph / powershell
  Share your own Graph PowerShell samples in the Discussions tab.
  ☆80Updated last year
• eneerge / CIS-Microsoft-Intune-For-Windows-IntuneProfile
  ☆57Updated 2 months ago
• kennethvs / cabaseline202212
  Conditional Access Baseline - December 2022
  ☆87Updated 2 years ago
• msp4msps / ScubaGear
  Automation to assess the state of your M365 tenant against CISA's baselines
  ☆32Updated last year
• nathanmcnulty / nathanmcnulty
  ☆277Updated last week
• o365soa / Scripts
  ☆115Updated last month
• Cloud-Architekt / AzurePrivilegedIAM
  Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra.
  ☆161Updated 3 weeks ago
• aollivierre / ConditionalAccess
  This repository contains a comprehensive set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID (…
  ☆86Updated 3 months ago
• thetolkienblackguy / ConditionalAccessIQ
  ConditionalAccessIQ streamlines this process by providing automatic version control, change tracking, and visual comparisons of your Cond…
  ☆41Updated 2 months ago
• LouisMastelinck / Monitor-security-policy-changes-or-admin-activities
  ☆19Updated last year
• alexverboon / WindowsDefenderATP-Hunting-Queries
  Sample queries for Advanced hunting in Microsoft Defender ATP
  ☆39Updated 3 years ago
• EEN421 / KQL-Queries
  Ian Hanley's deceptively simple KQL queries.
  ☆51Updated 3 weeks ago
• michaelmsonne / ManagedIdentityPermissionManager
  Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permiss…
  ☆97Updated last week
• microsoft / AzureADToolkit
  PowerShell module to manage Azure Active Directory app credentials.
  ☆117Updated last year
• ManagedSentinel / AzureSentinelKQLScripts
  Various tools used to monitor and troubleshoot Azure Sentinel data
  ☆30Updated 8 months ago
• alexverboon / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆170Updated last week
• chadmcox / Azure_Active_Directory
  Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics
  ☆2Updated last week