Pinned Loading

1. Hunting-Queries-Detection-Rules Hunting-Queries-Detection-Rules Public

   KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

   Python 1.6k 300

2. Open-Source-Threat-Intel-Feeds Open-Source-Threat-Intel-Feeds Public

   This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

   Python 717 75

3. Incident-Response-Powershell Incident-Response-Powershell Public

   PowerShell Digital Forensics & Incident Response Scripts.

   PowerShell 710 105

4. Sentinel-Automation Sentinel-Automation Public

   Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.

   104 16

5. Domain-Response Domain-Response Public

   Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to automated phishing domain investigations. However it can be used …

   Python 49 6

6. SecScripts SecScripts Public

   Security Scripts and Sources for daily usage.

   Python 66 5