defender-for-endpoint

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Hunting queries and detections

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

MDATP

PowerShell-based Automation of Defender for Endpoint

Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant.

ASR Configurator, Essentials and Atomic Testing

Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious behavior

Microsoft Intune Custom Compliance

This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.

This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.

Security baseline for managing Linux devices with Microsoft Intune — Ubuntu autoinstall enrollment, custom compliance policies, and hardening scripts for Defender, firewall, encryption and updates.

PowerShell + WPF GUI for managing DUDE automation (Dynamic User & Device Enumeration)

Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

Defender XDR Advanced Hunting Queries (MDE, MDAV, Device Discovery)

Microsoft Defender for Endpoint PowerShell module

Python for Security is the home of all open source Python projects that can integrate with Microsoft Technologies.

Windows Defender Disable Tool - disable windows defender, windows defender disable, how to disable windows defender, windows 11 permanently, tamper protection, powershell, windows defender remover, windows defender off, portable github. Download:🡇