Collection of various MVISION EDR Integration Scripts

TufinCSV2SC.py will parse csv data and generate relevant API calls into a Tufin SecureChange automated workflow to provision firewall rules in the native language of the firewall.

Welcome to the Microsoft Defender for Cloud community repository

Elastic and ECS formatted version of Boss of the SOC Dataset v1

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Detect Tactics, Techniques & Combat Threats

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

Packer config to build VMX from Ubuntu 20.04 server ISO using subiquity & debian-installer

A repository of sysmon configuration modules

McAfee Active Response Tracing for Air-Gapped Environments

Virtual Machine for Adversary Emulation and Threat Hunting