Popular repositories Loading

1. KQLAdvancedHunting KQLAdvancedHunting Public

   Production-ready KQL queries for Microsoft Defender XDR and Microsoft Sentinel. Focused on Threat Hunting, Detection Engineering, and MITRE ATT&CK mapping.

   PowerShell 106 17

2. PingCastle2LogAnalytics PingCastle2LogAnalytics Public

   a solution to analyze an monitor your PingCastle Reports with KQL in a LogAnalytics

   PowerShell 3

3. anyrunIOC anyrunIOC Public

   get IOC (IP, Hostnames, Filehashes) from anyrun tracker

   PowerShell 2 1

4. PSmissingUpdates2json PSmissingUpdates2json Public

   Query Windows for missing Updates and create a json

   PowerShell

5. Azure-Sentinel Azure-Sentinel Public

   Forked from Azure/Azure-Sentinel

   Cloud-native SIEM for intelligent security analytics for your entire enterprise.

   Python

6. Locksmith2 Locksmith2 Public

   Forked from jakehildreth/Locksmith2

   An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

   PowerShell