n1c0sa Goto Github PK

awesome-kql-sentinel

A curated list of blogs, videos, tutorials, queries and anything else valuable to help you learn and master KQL and Microsoft Sentinel

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azure-sentinel-notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

blue-team-app-office-365-and-azure

cyberchef-recipes

A list of cyber-chef recipes and curated links

cybersecurity_tools

ejptv2-notes

Penetration Testing Student version 2 simple condensed NOTES for quick recap

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

invoke-obfuscation

PowerShell Obfuscator

kql

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

kql-1

KQL queries for Advanced Hunting

microburst

A collection of scripts for assessing Microsoft Azure security

microsoft-365-extractor-suite

A set of PowerShell scripts that allow for complete and reliable acquisition of the Microsoft 365 Unified Audit Log

microsoft-defender-for-cloud

Welcome to the Microsoft Defender for Cloud community repository

mustlearnkql

Code included as part of the MustLearnKQL blog series

sentinel_kql

In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (a SIEM tool).

sentinelkql

Azure Sentinel KQL

tcert-cumulonimbus-ual_extractor

Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a Microsoft 365 environment.

zero-trust-architecture

Principles to help you design and deploy a zero trust architecture