Alternatives and similar repositories for KQL_Intune:

Users that are interested in KQL_Intune are comparing it to the libraries listed below

• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆66Updated 2 years ago
• mattnovitsch / M365
  ☆55Updated 2 weeks ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆100Updated 4 months ago
• Cyberlorians / Articles
  ☆51Updated last month
• ThomasVrhydn / MDE-troubleshooter
  This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …
  ☆54Updated last month
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆105Updated last year
• msdirtbag / mde
  Defender for Endpoint
  ☆17Updated last year
• ugurkocde / IntuneDeviceQuery
  This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.
  ☆95Updated 3 weeks ago
• rod-trent / SentinelWorkbooks
  Workbooks for Azure Sentinel
  ☆58Updated last year
• eneerge / CIS-Microsoft-Intune-For-Windows-IntuneProfile
  ☆46Updated last week
• dougsbaker / CA-Export
  ☆22Updated 3 weeks ago
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆149Updated this week
• j0eyv / ConditionalAccessBaseline
  ☆124Updated this week
• msgraph / powershell
  Share your own Graph PowerShell samples in the Discussions tab.
  ☆80Updated last year
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆44Updated 5 months ago
• LouisMastelinck / Monitor-security-policy-changes-or-admin-activities
  ☆18Updated last year
• nathanmcnulty / nathanmcnulty
  ☆243Updated this week
• ManagedSentinel / AzureSentinelKQLScripts
  Various tools used to monitor and troubleshoot Azure Sentinel data
  ☆30Updated 4 months ago
• dmrellan / Visual-Auditing-Security-Workbook-with-Microsoft-Sentinel
  ☆33Updated last year
• alexverboon / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆139Updated 3 weeks ago
• michaelmsonne / ManagedIdentityPermissionManager
  Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permiss…
  ☆61Updated last month
• chadmcox / Azure_Active_Directory
  Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics
  ☆66Updated this week
• workoho / Entra-Tiering-Security-Model
  Implement a powerful Tiering Security Model in Microsoft Entra for your Cloud Administrator identities using Azure Automation.
  ☆44Updated last month
• DevClate / 365AutomatedLab
  This module will create a Microsoft 365 Test Environment
  ☆101Updated 3 weeks ago
• EEN421 / KQL-Queries
  Ian Hanley's deceptively simple KQL queries.
  ☆48Updated this week
• kennethvs / cabaseline202212
  Conditional Access Baseline - December 2022
  ☆86Updated last year
• aollivierre / ConditionalAccess
  This repository contains a comprehensive set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID (…
  ☆81Updated last week
• o365soa / Scripts
  ☆112Updated 2 months ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆67Updated 4 months ago