Alternatives and similar repositories for KQL_Intune:

Users that are interested in KQL_Intune are comparing it to the libraries listed below

• mattnovitsch / M365
  ☆55Updated last week
• msdirtbag / MDE-Quickstart
  MDE Quickstart is a battle-tested MDE policy set designed to be restored with Intune Backup & Restore
  ☆66Updated 2 years ago
• microsoft / Microsoft-Defender-for-Identity
  Additional resources to improve customer experience with Microsoft Defender for Identity
  ☆103Updated 2 weeks ago
• msdirtbag / mde
  Defender for Endpoint
  ☆17Updated last year
• dougsbaker / CA-Export
  ☆36Updated last week
• ThomasVrhydn / MDE-troubleshooter
  This tool is designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized …
  ☆55Updated last month
• Cloud-Architekt / EntraOps
  Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM)
  ☆154Updated last month
• Cyberlorians / Articles
  ☆51Updated 3 months ago
• DanielChronlund / DCSecurityOperations
  A collection of Microsoft Sentinel workbooks and analytics rules.
  ☆105Updated last year
• msdirtbag / MDEAutomator
  PowerShell-based Automation of Defender for Endpoint
  ☆57Updated this week
• ugurkocde / IntuneDeviceQuery
  This repository contains a wide array of KQL Queries ready for you to easily copy, paste, and execute within Intune.
  ☆99Updated 2 months ago
• rod-trent / SentinelWorkbooks
  Workbooks for Azure Sentinel
  ☆58Updated last year
• nathanmcnulty / nathanmcnulty
  ☆256Updated last week
• aollivierre / ConditionalAccess
  This repository contains a comprehensive set of Conditional Access (CA) policies and PowerShell management tools for Microsoft Entra ID (…
  ☆84Updated last month
• JesseEsquivel / MDATP
  Microsoft Defender Advanced Threat Protection
  ☆44Updated 6 months ago
• eneerge / CIS-Microsoft-Intune-For-Windows-IntuneProfile
  ☆50Updated last month
• LouisMastelinck / Monitor-security-policy-changes-or-admin-activities
  ☆18Updated last year
• dmrellan / Visual-Auditing-Security-Workbook-with-Microsoft-Sentinel
  ☆33Updated 3 weeks ago
• ManagedSentinel / AzureSentinelKQLScripts
  Various tools used to monitor and troubleshoot Azure Sentinel data
  ☆30Updated 6 months ago
• j0eyv / ConditionalAccessBaseline
  ☆149Updated last week
• msgraph / powershell
  Share your own Graph PowerShell samples in the Discussions tab.
  ☆80Updated last year
• DevClate / 365AutomatedLab
  This module will create a Microsoft 365 Test Environment
  ☆101Updated 2 months ago
• YongRhee-MDE / LiveResponse
  M365 MDATP Live Response sample scripts
  ☆69Updated 6 months ago
• kennethvs / cabaseline202212
  Conditional Access Baseline - December 2022
  ☆87Updated 2 years ago
• alexverboon / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆155Updated 3 weeks ago
• PeterKlapwijk / Microsoft-Logic-Apps
  Microsoft Logic Apps flows
  ☆54Updated 2 months ago
• rucam / defender-comparison
  ☆59Updated last year
• thetolkienblackguy / ConditionalAccessIQ
  ConditionalAccessIQ streamlines this process by providing automatic version control, change tracking, and visual comparisons of your Cond…
  ☆38Updated 3 weeks ago
• Cloud-Architekt / AzureSentinel
  Sharing my KQL queries for Azure Sentinel
  ☆169Updated 3 weeks ago
• PuravsPoint / DecipheringUAL
  This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365…
  ☆58Updated 11 months ago