defender-for-endpoint · GitHub Topics

Bert-JanP / Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Azure defender-for-endpoint dfir kql sentinel threat-hunting vulnerability-management zero-day blueteam Cybersecurity 安全 misp

Python 1.47 k

8 天前

FalconForceTeam / FalconFriday

Hunting queries and detections

kql blueteam hunting purpleteam sentinel defender-for-endpoint

804

5 个月前

Cyb3r-Monk / Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

threat-hunting threat-detection Cybersecurity defender-for-endpoint detection-engineering dfir kql

Jupyter Notebook 732

3 个月前

alexverboon / MDATP

#学习与技能提升#MDATP

blogs defender-for-endpoint kql learning threathunting

PowerShell 461

1 年前

lawndoc / AdvancedHuntingQueries

Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.

安全 Cybersecurity kql hunting threat-hunting detection detection-engineering Microsoft microsoft365 defender-for-endpoint defender cyber-security xdr

124

10 个月前

msdirtbag / MDEAutomator

PowerShell-based Automation of Defender for Endpoint

azure-functions bicep defender defender-for-endpoint edr PowerShell graph

PowerShell 98

5 天前

jischell-msft / RemoteManagementMonitoringTools

Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

defender-for-endpoint kql 安全 threat-hunting rmm

PowerShell 88

10 个月前

MHaggis / ASRGEN

ASR Configurator, Essentials and Atomic Testing

asr defender-for-endpoint Windows

Python 61

2 个月前

jkerai1 / SoftwareCertificates

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

block certificate defender gpo 软件 pull-requests Azure defender-for-endpoint Microsoft

Python 42

5 天前

alexverboon / IntuneCustomCompliance

Microsoft Intune Custom Compliance

defender-for-endpoint JSON PowerShell 安全 microsoft-intune

PowerShell 36

1 年前

HybridBrothers / Hunting-Queries-Detection-Rules

The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious behavior

defender-for-endpoint kql Microsoft

1 个月前

13ihsan92 / Security-Blue-Team

This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.

自动化 Cybersecurity defense endpoint-security siem soar defender-for-endpoint defensive security-automation security-hardening 安全

2 年前